Splunk ES Content Update
Splunk Built
Overview
Details
This subscription service delivers pre-packaged Security Content for use with Splunk Enterprise Security. Subscribers get regular updates to help security practitioners more quickly address ongoing and time-sensitive customer problems and threats.
Requires Splunk Enterprise Security version 4.5 or greater.
Requires Splunk Enterprise Security version 4.5 or greater.
For more information please visit the Splunk ES Content Update user documentation.
Release Notes
Version 1.0.34
Feb. 12, 2019
Splunk Enterprise Security Content Updates 1.0.34. Copyright (C) 2019 Splunk Inc. All rights reserved.
Splunk Enterprise Security Content Update version 1.0.34 was released on February 12, 2019, and introduced the following improvement:
NEW ANALYTIC STORY
Title: DNS Hijacking
Secure your environment against DNS hijacks with searches that help you detect and investigate unauthorized changes to DNS records.
For full documentation, visit http://docs.splunk.com/Documentation/ESSOC/1.0.34/user/About