Exam SPLK-5001 Topic 4 Question 132 Discussion
Actual exam question for Splunk's SPLK-5001 exam
Question #: 132
Topic #: 4
Question #: 132
Topic #: 4
Splunk detections can be mapped to their appropriate MITRE ATT&CK Techniques using which feature?
Suggested Answer: C Vote an answer
In Splunk Enterprise Security, correlation searches and other detections include annotation fields where you map each detection to its corresponding MITRE ATT&CK tactic and technique IDs.
These Annotations are what drive the ATT&CK mapping in dashboards and reports.
These Annotations are what drive the ATT&CK mapping in dashboards and reports.
by Susan at Jul 14, 2026, 06:26 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).