splunk-security_content/docs/_pages/best_practices.md

title, layout, author_profile, taxonomy, permalink, sidebar

title	layout	author_profile	taxonomy	permalink	sidebar
Best Practices	tag	false	Best Practices	/stories/best_practices/	nav stories

Name	Technique	Tactic
Asset Tracking	None	None
Monitor for Updates	None	None
Prohibited Traffic Allowed or Protocol Mismatch	Remote Desktop Protocol, Drive-by Compromise, Remote Services, Exfiltration Over Alternative Protocol, Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol, Web Protocols	Lateral Movement
Router and Infrastructure Security	Hardware Additions, Network Denial of Service, ARP Cache Poisoning, Man-in-the-Middle, TFTP Boot, Traffic Duplication	Initial Access
Use of Cleartext Protocols	None	None