Skip to main content
ALTIA-CSIRT Active Directory app icon

ALTIA-CSIRT Active Directory

ALTIA-CSIRT Active Directory is an application that automates the deployment of a focused set of security alerts dedicated to monitoring Active Directory environments. It offers comprehensive visibility into authentication events, group policy modifications, privilege escalations, and potential domain compromise activities. By detecting anomalous behavior and unauthorized administrative actions in real time, this solution fortifies identity security, prevents lateral movement within the network, and strengthens the integrity and resilience of the organization’s core directory infrastructure.Built by Ciberseguridad Altia
splunk product badge
Default Version 1.0.0

October 23, 2025

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3

CIM Version: 6.x

Rating
0
(0)

Log in to rate this app

Support
Developer Supported
Ranking

#6 in Directory Service

ALTIA-CSIRT Active Directory is an application that automates the deployment of a focused set of security alerts dedicated to monitoring Active Directory environments. It offers comprehensive visibility into authentication events, group policy modifications, privilege escalations, and potential domain compromise activities. By detecting anomalous behavior and unauthorized administrative actions in real time, this solution fortifies identity security, prevents lateral movement within the network, and strengthens the integrity and resilience of the organization’s core directory infrastructure.