Video Splunk for Security: Expansion – Windows DNS Monitoring Episode 4 Series Overview Video Summary In the final video of the Splunk for Security: Expansion series, the focus is on setting up Windows DNS monitoring using Splunk Stream. The process begins with navigating to the Splunk Stream app, selecting “Configuration,” and then adding a new […]
Splunk for Security: Expansion – Window DNS Monitoring Read More »
Video Splunk for Security: Expansion – Data-Flow Capabilities Episode 3 Series Overview Video Summary In this third installment of the Splunk for Security: Expansion series, the focus shifts to exploring the capabilities of the Splunk Stream app through its dashboards. The video begins by reviewing the data ingested into Splunk, which is now available for
Splunk for Security: Expansion – Data-Flow Capabilities Read More »
Video Splunk for Security: Expansion – Stream Data-Flows Episode 2 Series Overview Video Summary In this instalment of the Splunk for Security Expansion series, we delve into the data flow processes within Splunk Stream. The flow mirrors conventional data handling tools: data is captured by forwarders, which are often installed on HEC servers, and then
Splunk for Security: Expansion – Stream Data-Flows – Episode 2 Read More »
Video Splunk for Security: Expansion – Architecting Splunk Streams Episode 1 Series Overview Video Summary In this first episode of the Splunk for Security: Expansion series, we explore the architecture and deployment of the Splunk Stream app. Splunk Stream provides real-time visibility into application and infrastructure performance by passively collecting data from the network, without
Splunk for Security: Expansion – Architecting Splunk Streams – Ep 1 Read More »
Video Splunk for Security: Normalisation – Understanding CIM Episode 3 Series Overview Video Summary In the third episode of our series on the Common Information Model (CIM), we explore how to maximise the benefits of CIM by effectively normalising data. The CIM itself is essentially a comprehensive collection of data models that Splunk continuously updates
Splunk for Security: Normalisation – Understanding CIM Read More »
Video Splunk for Security: Normalisation – CIM Data Models 101 Episode 1 Series Overview Video Summary This video is the first in a series focusing on the Common Information Model (CIM) and its role in data normalisation. It introduces data models, explaining how they standardise data from multiple sources by aligning different field names and
Splunk for Security: Normalisation – CIM Data Models 101 Read More »
Video Varonis SaaS Explained – Alerts, UBA & Incident Response Episode 3 Video Summary Varonis SaaS offers a streamlined approach to data security by delivering meaningful alerts without overwhelming users with excessive noise. It utilises User Behaviour Analytics (UBA) to build individual user profiles, allowing it to detect and alert on unusual activity. Combined with
Varonis SaaS Explained – Alerts UBA, Incidence Response Read More »
Video Varonis SaaS Explained – Varonis SaaS for M365 Episode 2 Video Summary Microsoft 365 is a powerful cloud platform that streamlines collaboration and communication in the modern workplace. Varonis SaaS plays a key role in safeguarding data within Microsoft 365 by monitoring the entire suite, including SharePoint Online, Teams, Azure AD, Exchange Online, and
Varonis SaaS Explained – Varonis SaaS for Microsoft 365 Read More »
Video Varonis SaaS Explained – What is Varonis SaaS? Episode 1 Video Summary Varonis SaaS is a cloud-native data security platform designed to simplify the discovery and protection of critical and sensitive information. It provides users with dashboards for various services such as SharePoint Online, OneDrive, and on-prem file shares, offering valuable insights into the
Varonis SaaS Explained – What is Varonis SaaS? – Episode 1 Read More »
Video Netskope Explained – Private Access Episode 7 Series Overview Video Summary This video illustrates how Netskope simplifies the configuration of private access policies for both web and non-web traffic. Using a server in AWS with a Netskope network client, the demonstration highlights how secure connections to internal resources, such as an RDP server, can
Netskope Explained – Private Access – Episode 7 Read More »
