Splunk Certified Cybersecurity Defense Analyst

Which Splunk ES feature detects complex behavior over a "period of time" instead of "point in time" alerting?

Which of the following is a reason to use Data Model Acceleration in Splunk?

Splunk detections can be mapped to their appropriate MITRE ATT&CK® Techniques using which feature?

A threat hunter is analyzing incoming emails during the past 30 days, looking for spam or phishing campaigns targeting many users. This involves finding large n...

A network security tool that continuously monitors a network for malicious activity and takes action to block it is known as which of the following?