Skip to content

Instantly share code, notes, and snippets.

@defensivedepth

defensivedepth/gist:748b1e8859c0559621eaeb30c3ea3322

Created April 27, 2021 00:24
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save defensivedepth/748b1e8859c0559621eaeb30c3ea3322 to your computer and use it in GitHub Desktop.
Save defensivedepth/748b1e8859c0559621eaeb30c3ea3322 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
event.dataset: "dce_rpc" | groupby source.ip destination.ip event.module event.dataset dce_rpc.operation
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment