Using the Lookup Command for Threat Hunting (Lookup Before You Go-Go)

[sorangutan]

Lookup commands are basically the #1 place to start any threat hunt in Splunk. Get the expert directions here.

https://www.splunk.com/en_us/blog/security/lookup-command-threat-hunting.html