This workshop provides a focused, hands-on experience using Splunk ITSI’s various workflows for troubleshooting IT problems. In this workshop you will learn about the basic AIOps features provided by ITSI and SAI: Service Monitoring, technical and business Multiple ways to visualize service health and correlate KPIs Various ML features Integration points to Splunk Enterprise, other Splunk products The Splunk ITSI for Ninjas largely build...

This is a modular, hands-on workshop designed to show participants how to leverage Splunk to develop their own correlation searches. Users will gain familiarity with building correlation searches in Splunk, as well as introducing data models and the tstats command that can provide a user a method to further optimise their correlation searches. The workshop leverages the popular Boss of the SOC (BOTS) dataset with hands-on exercises that build...

A hands-on workshop that focuses on Splunk as a platform and the ability to onboard data into Splunk. This workshop explores the various ways to gather inputs, best practices and the various methods to bring data into Splunk:, including, Collecting Data Indexing Best Practices, Field extraction and CIM compliance. Who should attend? Splunk administrators responsible for onboarding data, creating knowledge objects and eventually building TA. Id...

Hunting in the Microsoft Cloud hands-on workshop is designed to show how to hunt using Splunk Enterprise and Splunk Enterprise Security in events generated from Microsoft Azure and Office 365. This workshop provides users an opportunity to gain familiarity with data collected within the Microsoft Cloud and then apply that knowledge to conducting a hunt using these same data sources. Attendees will leave with a better understanding of how Splun...

Enterprise Security is a modular, hands-on workshop designed to familiarise participants with how to investigate incidents using Splunk Enterprise and Splunk Enterprise Security. This workshop provides users an opportunity to walk through multiple scenarios and see first-hand how Enterprise Security can be used from the creation of a notable event to investigate all the way to the raw event that identifies the adversaries action. The workshop...

This is a scenario-based hands-on workshop designed for Splunk security customers already in or moving into AWS. The scenarios use different pieces of cloud-focused data and include a key compromise, a public S3 bucket, and network attacks which incorporate content from ESCU or SSE to detect and investigate malicious activity. The workshop leverages the popular Boss of the SOC (BOTS) v3 dataset and is laid out in an interactive format. Please...

A 3 hour session where attendees will get an introduction to Splunk's Machine Learning Toolkit (MLTK). They will gain hands-on experience where they are given Machine Learning Challenges to be solved and results collected on dashboards in their own AWS hosted Splunk instance. During this interactive, hands on workshop we will also cover Exploratory Data Analysis and how to detect outliers and more! Who should attend? Existing Splunk users who...

Splunking the Endpoint is a modular, hands-on workshop designed to familiarize participants with different endpoint technologies and how to leverage Splunk to gain greater insight into the activities occurring on the endpoint. This workshop provides users a way to gain familiarity with various endpoint logging tools, including Microsoft Event Logs, Sysmon, PowerShell, osquery, CB and Cisco NVM, as well as introduces them to Splunk Security Ess...

You're invited to join us for a Splunk Security Operations Suite Virtual workshop on January 19, 2021 at 1pm ET where Splunk experts will demonstrate how to use our security suite to better optimize your organization’s security operations to investigate, monitor, analyze and respond to security incidents. The goal is to help you develop and implement an effective investigative strategy – one that addresses a broad range of security...

Join us for the Splunk for Security Virtual Lunch and Learn Workshop on January 13th at 1pm ET where you will learn how to leverage Splunk to search security events. This 2-hour hands-on workshop is a great opportunity for you to discover the value of Splunk, continue your professional development and learn more about leveraging data within your organization. During this workshop you will: * Familiarize yourself with the Splunk interface * Sea...