GitHub repository: splunk/rba
Created: 2022-09-01T23:24:40Z
Description: RBA is Splunk's method to aggregate low-fidelity security events as interesting observations tagged with security metadata to create high-fidelity, low-volume alerts.