Prompt Details
Model
Chat - (gpt-5.5)
Token size
462
Example input
[Paste your use case, logs, or SPL here]: Detect brute-force attacks against Active Directory using Windows Security logs.
Example output
Detection Summary
Security Objective
Detect repeated failed authentication attempts followed by a successful login.
Attack Description
An attacker attempts multiple passwords until authentication succeeds.
Generated SPL
index=wineventlog EventCode=4625 OR EventCode=4624
| stats count(eval(EventCode=4625)) as Failed count(eval(EventCode=4624)) as Success by Account_Name src_ip
| where Failed>10 AND Success>0
MITRE ATT&CK
TA0006 Credential Access
T1110 Brute Force
False Positives
Password managers
Users forgetting passwords
VPN reconnects
Blind Spots
Missing domain controller logs
Disabled auditing
Detection Quality Score
9.2/10
Get this prompt + 9 more with Select$14 first month, then $19/mo · Cancel anytime$14 first month · then $19/mo
View Select
Instant access
Commercial use
Money‑backBy purchasing this prompt, you agree to our terms of service
2
Views
GPT-5.5
Turn ChatGPT into an experienced Splunk Detection Engineer.
This prompt analyzes security use cases and automatically generates optimized SPL queries, maps detections to MITRE ATT&CK, identifies blind spots, explains the detection logic, estimates false positives, and recommends improvements.
Perfect for SOC analysts, detection engineers, blue teams, and security consultants working with Splunk Enterprise Security.
...more
Added over 1 month ago
