From d78f2a9eb7a7638abc8752467ea142b3dc814de7 Mon Sep 17 00:00:00 2001 From: mvelazco Date: Thu, 19 Jan 2023 17:01:48 -0500 Subject: [PATCH] new analytic story --- stories/compromised_user_account.yml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 stories/compromised_user_account.yml diff --git a/stories/compromised_user_account.yml b/stories/compromised_user_account.yml new file mode 100644 index 0000000000..e530f12edb --- /dev/null +++ b/stories/compromised_user_account.yml @@ -0,0 +1,16 @@ +name: Compromised User Account +id: 19669154-e9d1-4a01-b144-e6592a078092 +version: 1 +date: '2023-01-19' +author: Mauricio Velazco, Bhavin Patel, Splunk +description: UPDATE_DESCRIPTION +narrative: UPDATE_NARRATIVE +references: [] +tags: + analytic_story: Compromised User Account + category: [] + product: + - Splunk Enterprise + - Splunk Enterprise Security + - Splunk Cloud + usecase: Advanced Threat Detection