Splunk Use Case to Detect Windows Log Tampering
Create a Splunk real-time use case to detect Windows Event Log tampering by monitoring Event IDs 104, 1100, and 1102.
Create a Splunk real-time use case to detect Windows Event Log tampering by monitoring Event IDs 104, 1100, and 1102.