LoFP
/
T1588.004
T1588.004
Title
Tags
this search tries to address validation of server and client certificates within splunk infrastructure, it might produce results from accidental or unintended requests to port 8089.
T1588.004
endpoint
splunk
this searches finds self signed certificates issued by splunk which are not recommended from splunk version 9 forward.
T1588.004
endpoint
splunk
LoFP
/
T1588.004