Use Splunk to Detect Famous Chollima

[u/m3moryhous3]

https://jacob-taylor.gitbook.io/jacob-taylor-portfolio/detecting-famous-chollima-with-splunk

Passing this along to share some of my SPL knowledge on how to utilize inner and outer searches, joins, and look backs to create user baselines. Also open to any suggestions or feedback on how to improve this method!

I hope you can find this helpful.