App-DB_CyberTech

Latest documentation is posted on http://app-db-cybertech.readthedocs.io

Common Elements

• Overview
  • About the DB Cybertech Splunk App
  • About the Add-on
  • Splunk/DBN Version Compatibility
  • Install From Github
• Syslog Messages
  • Message Overview
  • Signature ID and Name Values
  • Syslog Message Detail
• Audit Codes
  • 4.2.4
  • 3.0.0
  • 2.2.14

DB CyberTech App

• Installation and Configuration
  • Installation Steps
  • Configure App-DB_CyberTech
• The Dashboards
  • Discovery Event Dashboard
  • Application Security Events
  • Insider Threat Events
  • Health Counters
  • Database Protocols Monitoring
• The DB Cybertech Splunk Alerts
  • Alert: DBC Engine Restart
  • Alert: DBC New User Identified
  • Alert: DBC Insider Threat Cluster Flow Activity
  • Alert: DBC Insider Threat Policy Activity Triggered
  • Alert: DBC New Application Security Event
  • Alert: DBC New Database Host Identified
  • Alert: DBC Database Table Identified
  • DBC Alert: Low Disk Space
• Release Notes
  • Version 2.0.1
  • Version 1.0.2

DB CyberTech Add-On

• Installation and Configuration
  • Installation Steps
  • Configure TA-DB_CyberTech
• User Guide
  • DBN TA Source Types
• Release Notes
  • Version 2.1.1
  • Version 2.0.0
  • Version 1.0.0