Defence Service Splunk Platform for Beginners Workshop How Splunk can provide out-of-the-box monitoring of your on-prem, cloud and hybrid platforms. Tuesday, November 17th 🇬🇧 10:00 AM – 1:00 PM UK Virtual, Microsoft Teams REGISTER JOIN OUR MAILING LIST Intro to Splunk: The Big Data Platform Join us to find out about the Splunk platform for […]
Defence Service: Splunk Platform for Beginners Workshop Read More »
Video Splunk SOAR Explained – Digitising Playbooks Episode 5 Series Overview Video Summary This video explains how existing incident response playbooks can be digitised using Splunk SOAR to enhance automation and streamline workflows. It outlines two main approaches to playbook design: automated and workflow-oriented. The automated approach focuses on sending events to Splunk SOAR for
Splunk SOAR Explained – Digitising Playbooks – Episode 5 Read More »
Video Splunk SOAR Explained – Response 101 Episode 4 Series Overview Video Summary This video demonstrates how Splunk SOAR (Security Orchestration, Automation, and Response) can be used to streamline event response by automating workflows and improving collaboration within security teams. It explores how data from multiple sources, such as structured data from SIEM systems and
Splunk SOAR Explained – Response 101 – Episode 4 Read More »
Video Splunk SOAR Explained – Achieving Security Orchestration Episode 2 Series Overview Video Summary This video focuses on how security orchestration is achieved within Splunk SOAR through the use of apps. These apps enable the integration and coordination of security functions by connecting various security tools, allowing programmatic control over security actions. With over 350
Splunk SOAR Explained – Achieving Security Orchestration Read More »
Video Splunk SOAR Explained – What is Splunk SOAR? Episode 1 Series Overview Video Summary This video introduces the concept of Splunk SOAR (Security Orchestration, Automation, and Response), focusing on how security automation removes the need for human interaction in key stages of cybersecurity operations. SOAR allows machines to handle the detection, investigation, and response
What is Splunk SOAR? – Episode 1 Read More »
Video Splunk SOAR Explained – How to Build Playbooks Episode 3 Series Overview Video Summary This video explains the process of building a Playbook within Splunk SOAR using the visual Playbook editor. Playbooks are designed to automate repetitive and time-consuming tasks, making security operations more efficient. A well-crafted Playbook should be easy to maintain and
Splunk SOAR Explained – How to Build Playbooks – Episode 3 Read More »
Video Splunk for Security: Normalisation – CIM Data Models Acceleration Episode 2 Series Overview Video Summary In the second episode of our series on the Common Information Model (CIM), we explore how to maximise the benefits of CIM by effectively normalising data. The CIM itself is essentially a comprehensive collection of data models that Splunk
Splunk for Security: Normalisation – CIM Data Models Acceleration – Episode 2 Read More »
Video Splunk for Security: Expansion – Windows DNS Monitoring Episode 4 Series Overview Video Summary In the final video of the Splunk for Security: Expansion series, the focus is on setting up Windows DNS monitoring using Splunk Stream. The process begins with navigating to the Splunk Stream app, selecting “Configuration,” and then adding a new
Splunk for Security: Expansion – Window DNS Monitoring Read More »
Video Splunk for Security: Expansion – Data-Flow Capabilities Episode 3 Series Overview Video Summary In this third installment of the Splunk for Security: Expansion series, the focus shifts to exploring the capabilities of the Splunk Stream app through its dashboards. The video begins by reviewing the data ingested into Splunk, which is now available for
Splunk for Security: Expansion – Data-Flow Capabilities Read More »
Video Splunk for Security: Expansion – Stream Data-Flows Episode 2 Series Overview Video Summary In this instalment of the Splunk for Security Expansion series, we delve into the data flow processes within Splunk Stream. The flow mirrors conventional data handling tools: data is captured by forwarders, which are often installed on HEC servers, and then
Splunk for Security: Expansion – Stream Data-Flows – Episode 2 Read More »
