Splunk Security Ninja Workshop EMEA Series: Security Operations Suite
Welcome to Splunk Security Ninja Workshop Series. These 4 hour, hands-on security workshops are brought to you by the Splunk team via Zoom. Learn, connect & interact with Splunk subject matter experts, colleagues and industry peers, and have some fun on the way!
Dates/Times: Thursday 2nd June | 09:30 - 13:30 BST/ 10:30 - 14:30 CEST
Dates/Times: Thursday 30th June | 09:30 - 13:30 BST/ 10:30 - 14:30 CEST
Security Operations Suite
The Security Products Hands-On is a modular, hands-on workshop designed to familiarize participants with how to investigate incidents using Splunk Enterprise, Enterprise Security, UBA and Phantom. This workshop provides users an opportunity to walk through multiple scenarios and see first- hand how Splunk Security Products can be used to take notable events and investigate, hunt and orchestrate actions based on what is uncovered. The workshop leverages the popular Boss of the SOC (BOTS) dataset and is laid out in an interactive format. Users will leave with a better understanding of how Splunk, Enterprise Security, UBA and Phantom can be used within security operations to process notable events and investigate as they occur in the enterprise.
Dates/Times: Thursday 7th July | 09:30 - 13:30 BST/ 10:30 - 14:30 CEST
The SOAR Hands-On workshop is designed to familiarize participants with how to respond to incidents, manage cases and artifacts, as well as automate your incident response and standard operating procedures. This workshop provides users an opportunity to walk through a real-world scenario and see first-hand how Phantom can be used from the creation of a notable event to enriching alerts by automatically gathering data, all the way to managing and resolving the incident.
Dates/Times: Thursday 14th July | 09:30 - 13:30 BST/ 10:30 - 14:30 CEST
Dates/Times: Thursday 21st July | 09:30 - 13:30 BST/ 10:30 - 14:30 CEST
Building Correlation Searches with Splunk Enterprise Security is a modular, hands-on workshop designed to familiarize participants with how to leverage Splunk to develop their own correlation searches. This workshop provides users a way to gain familiarity with building correlation searches in Splunk, as well as introducing data models and the tstats command that can provide a user a method to further optimize their correlation searches. The workshop leverages the popular Boss of the SOC (BOTS) dataset with hands-on exercises that build on one another. Users will come away with a better understanding of how to build their own correlation searches in Splunk as well as how to customize their associated notable events to provide more immediate insights to their analysts.
Dates/Times: Thursday 28th July | 09:30 - 13:30 GMT/ 10:30 - 14:30 CET
Splunking the Endpoint is a modular, hands-on workshop designed to familiarize participants with different endpoint technologies and how to leverage Splunk to gain greater insight into the activities occurring on the endpoint. This workshop provides users a way to gain familiarity with various endpoint logging tools, including Microsoft Event Logs, Sysmon, PowerShell, osquery, CB and Cisco NVM, as well as introduces them to Splunk Security Essentials and ES Content Updates. A utility called Window Event Code Analyzer is also covered which is designed to assist users in determining which Windows events to log! The workshop leverages the popular Boss of the SOC (BOTS) dataset with hands-on exercises for each technology. Users will come away with a better understanding of the logging at the endpoint available to them and which events are important to collect to gain visibility into adversary actions on the endpoint.
Relevant Government Agencies
Other Federal Agencies, Federal Government, State & Local Government
Event Type
Virtual
This event has no exhibitor/sponsor opportunities
When
Thu, Jul 7, 2022, 9:30am - 1:30pm
Cost
Complimentary: $ 0.00
Website
Click here to visit event website
Organizer
Splunk