Splunk Enterprise Security Virtual Workshop

Users will have the opportunity to walk through multiple real-world scenarios and see first-hand how Enterprise Security can be used from the creation of a notable event to investigate all the way to the raw event that identifies the adversaries action.

The workshop agenda includes:

- A brief overview of Enterprise Security

- Web Application Vulnerability Incident

- APT Incident

- Spyware/Malware Incident

- Enterprise Security Content Update (ESCU) overview and familiarization

Seating in this class is limited to 50 participants.

================

Who Should Attend?

================

* Members of a Security Operations teams responsible for security monitoring and incident response.

* Existing Splunk customers (6+ months) familiar with Splunk for security and/or are looking at replacing a SIEM.

This workshop will help attendees:

• Understand the kinds of notable events that Enterprise Security can provide

• Learn more about how the power the analyst has to drill deeper into the underlying events that triggered these events

• Learn how Splunk Enterprise Security can provide analysts with access to all of their security data in a single interface to answer questions generally asked of the SOC