icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading Splunk Security Essentials for Fraud Detection
SHA256 checksum (splunk-security-essentials-for-fraud-detection_101.tgz) a7fd3674bc06d74b6c21adfbddb79915e108a7b941e46b86ac6086bf2304c005
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate

splunk

Splunk Security Essentials for Fraud Detection

Splunk Labs
This app is NOT supported by Splunk. Please read about what that means for you here.
Overview
Details
Learn how Splunk Enterprise may be used to detect various forms of fraud using the example scenarios in Splunk Security Essentials for Fraud Detection.
These detection use cases were implemented using the Search Processing Language (SPL) and the Machine Learning Toolkit (MLTK).
The use cases include example data sets so you may run them yourself. After learning about these examples, you can start to experiment with similar scenarios with your own data using Splunk Enterprise.

Attention: This application contains a large example data set so some dashboards may be slow to load.

Description

Learn how Splunk Enterprise may be used to detect various forms of fraud using the example scenarios in Splunk Security Essentials for Fraud Detection. Each detection use case includes a description of how it was implemented using the Search Processing Language (SPL) and the Machine Learning Toolkit (MLTK). The use cases include example data sets so you may run them yourself. After learning about these examples you should be ready to start experimenting with similar scenarios on your own data using Splunk Enterprise.

What is the Splunk Security Essentials For Fraud Detection App?

Learn ways to detect fraudsters with Splunk software by examining the example use cases in this free app. This app uses Splunk Enterprise and the power of our Search Processing Language (SPL) to showcase working examples of fraud detection. Each use case includes sample data and searches that can be used as a reference to help implement use cases in your environment. The example use cases give analysts the ability to detect potentially fraudulent activities in healthcare insurance claims, payment card purchases and wire transfers. Each use case includes a description, an explanation of how the search works and pointers to keep in mind when implementing similar use cases on your own data.

Use Cases:

Healthcare Insurance Billing

  • Providers with very abnormal prescriptions
  • Provider peer group profile

Payment Cards

  • High risk cards
  • Risky transactions
  • Victimized merchants

Wire Transfer

  • Customers with abnormal behavior
  • Account Profiling
  • Account Behavior Profile

Dependencies:

Splunk Security Essentials for Fraud Detection depends on the following apps

Splunk Machine Learning Toolkit
Python for Scientific Computing
Clustered Single Value Map Visualization
3D Scatterplot

All above apps can be downloaded for free from Splunkbase. When installing these apps please select the appropriate platform.

Make sure these apps are properly installed in your Splunk environment before installing this app.

Data Sources Used

Example Healthcare Insurance Billing logs
Example Credit Card transaction logs
Eventgen for wire transfer demo

Performance Impact

The example use cases are intended to demonstrate possible detection logic. These use cases are not necessarily optimized for performance. When implementing use cases in your environment based on this logic please make sure to optimize for your specific deployment and data sets.

Detection Methods Used by the Searches

Splunk SPL searches
Machine Learning Toolkit

Quick Installation Suggestions

Due to very large size of the app - it may be a challenge to install it via normal, GUI way.
Here are suggested steps to install this app in a faster, more reliable manner:
- Download the app to your computer
- Unzip it manually (via WinRar or 7Zip or related linux utilities)
- If you do not need Healthcare demo - you may delete Healthcare dataset - all files under ./Splunk-SE-Fraud-Detection/DATA/af-cms* - this will greatly reduce the size of the app as well.
- Move ./Splunk-SE-Fraud-Detection tree under ./etc/apps of your Splunk installation
- Restart Splunk
- If you included (did not delete) healthcare datasets - give app some time (30-60 minutes) to index the complete datasets. Once indexing is finished (af-cms-* indexes stopped growing) - the app is ready for use

Release Notes

Version 1.0.1
Sept. 21, 2017

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.