PreCrime Intelligence, the predictive threat intelligence domain list, serves as your pre-emptive shield against tomorrow’s threats. We encourage you to test our intelligence feed by correlating the suspicious domains listed in our feed with your network log files. For more advanced pre-emptive security we encourage you to block all the Malicious domains (with a Score >= 0.8) Here are some log sources that can be beneficial: Web Proxy Logs: Identify access to malicious domains from browsers. DNS Logs: Detect any DNS queries to suspicious domains. Firewall Logs: Monitor connection attempts to and from suspicious domains. IDS/IPS Logs: Correlate detected intrusions with our intelligence feed. Endpoint Logs: Check for endpoint attempts to access malicious domains. By integrating our intelligence feed with these logs, you can preemptively detect and mitigate threats in your network, significantly enhancing your security defenses.
(0)
Categories
Created By
Type
Downloads
Licensing
Splunk Answers
Resources