Splunk for Security - Enterprise Security (ES) Discovery Workshop​

About the Workshop

Join Somerford's Splunk Security Expert, Ben Marrable to understand Splunk Enterprise Security, where it sits within Splunk's Security offering and how you can leverage it to improve your security detections and incident response.

Splunk Enterprise Security (ES) acts as the central management interface of the security operations centre, giving teams the insight to detect and respond to internal and external attacks quickly, simplifying threat management and minimising risk. ES helps teams gain organisation-wide visibility and security intelligence for continuous monitoring, incident response, and SOC operations, and provides executives with a window into business risk.

✓ An Overview of the Splunk Platform for Security
✓ Introduction to Splunk Enterprise Security and where it fits within the Splunk Eco-System
✓ How to define Security Events and create Correlation Searches
✓ How to conduct an Investigation with ES
✓ How to go Security Hunting with Enterprise Security
✓ Introduction to Risk Based Alerting (RBA)

*Prerequisite to attend the Splunk Enterprise Security Workshop is to be a user of Splunk or have attended one of our ‘Introduction to Splunk/ Splunk Essentials’ workshops.