Guide · from Splunk
Top Cybersecurity Threat Detections With Splunk and MITRE ATT&CK
Now more than ever, detecting the latest attack techniques right in Splunk Enterprise Security, the market-leading SIEM, is a critical capability. This updated guide reflects significant changes in the threat landscape
- Format
- Guide
- Published by
- Splunk
- Added
- 8 Jun 2026
About this guide
Now more than ever, detecting the latest attack techniques right in Splunk Enterprise Security, the market-leading SIEM, is a critical capability. This updated guide reflects significant changes in the threat landscape since October 2022, including:
- The addition of ESXi as a platform in ATT&CK Enterprise v17 (April 2025).
- New techniques for AI security and detection.
- Enhanced coverage for Cisco environments.
- Expanded cloud security detections.
- Specialized detections for lateral movement and privilege escalation.
Listen or skim
Summaries are generated from this page’s text. Read the full piece for the detail.
More from Splunk
All 7 →
The Essential Guide to Continuous Asset and Identity Intelligence
The adage remains true: You can’t manage what you can’t see. Continuous asset and identity intelligence is a transformative approach to managing and securing the vast array of assets within an organization. In this
10 Essential Capabilities of the SOC of the Future
Security will never be simple. But with the right operating model, it can be manageable — and even proactive. That’s the promise of the SOC of the future.
The Essential Guide to Zero Trust
Now more than ever, organizations are turning to a zero trust strategy to secure their data and systems. Regardless of size or sector, zero trust is essential to any business in the wake of COVID-19. And high-profile
Elsewhere in Cybersecurity & Threat Management
See the category →
Cyber Threat Landscape Report 2026
Frontline intelligence on the cyber risks shaping ASEAN, Australasia, and East Asia.
F5 named an innovation, market, and product leader in KuppingerCole's GenAI Defense Leadership Compass
In their inaugural guide addressing the nascent and evolving space of AI security, KuppingerCole has released its Generative AI Defense Leadership Compass, naming F5 as an Innovation Leader. At F5, we are thrilled and
F5 named a leader in SecureIQLab’s Cloud WAAP v5.0 CyberRisk Validation Comparative Report
In SecureIQLab’s recent “Cloud WAAP v5.0 Comparative Report,” F5’s Distributed Cloud WAAP was placed in the Leader tier of the CyberRisk Ripple—the report's highest classification, reserved for solutions scoring well on