A.ess_user

B.ess_admin

C.ess_analyst

D.ess_reviewer

A.On a Splunk server with top level visibility.

B.On any Splunk server.

C.On a server with a new install of Splunk.

D.On a Splunk server running Splunk DB Connect.

A.Assets.

B.Threat intel.

C.Domains.

D.Security domains.

A.IP address.

B.Email.

C.Nickname

D.Combination of Last Name, First Name.

A.From the Preferences menu for the user, select Enterprise Security as the default application.

B.From the Edit Navigation page, drag and drop the Threat Activity view to the top of the page.

C.Edit the Threat Activity view settings and checkmark the Default View option.

D.From the Edit Navigation page, click the 'Set this as the default view" checkmark for Threat Activity.