Examice

Exam SPLK-3001 All QuestionsBrowse all questions from this exam

Go to Exam

Question 79

What do threat gen searches produce?

Threat correlation searches.

Threat intel in KV Store collections.

Events in the threat_activity index.

Threat notables in the notable index.

Correct Answer: C

Threat gen searches are designed to produce events in the threat_activity index. These searches are part of the process of identifying and logging potential security threats based on the threat intelligence framework, which tracks and stores related events for further analysis and response.

Discussion

Steve2610Option: C

P: 278 "The Threat Intelligence Framework"

qtygbapjpesdayazkoOption: C

C. Events in the threat_activity index.

noyshererOption: C

Splunk Enterprise Security Admin Slides 309