do they have query packs geared toward detecting lateral movement on linux servers? Having issues with logs in splunk (ntp,syslog, etc). any help would be appreciated 🙂