Take NASA's Security to the Next Level with Splunk

During these times, agency frontline workers, help desk, and support teams have gone remote. So, what has Splunk done to address what agencies can do to better facilitate personnel productivity for these teams who are charged with ensuring mission continuity, application security, and availability?

 

Join us for a series of on-demand webinars that are designed to introduce you to the Splunk ecosystem and provide you with a deeper dive into how it can improve NASA's security, either from home or the office. We started with a Splunk 101 session detailing the value of Splunk by going over an introduction, use cases, and the Splunk Data-to-Everything platform. Following that, a full demonstration of Enterprise Security (ES) was reviewed. It's capabilities, including security-focused dashboards, how to automate response actions to alerts, and ticket management with workbenches will be discussed. Participants were familiarized with how to respond to incidents, manage cases and artifacts, as well as automate your incident response and standard operating procedures.

 

Splunk 101: We demonstrated the ability to ingest unstructured machine data from any operational environment to offer detailed insights, correlations, and analysis in real-time. Topics included how the Security Essentials App and the Splunk Enterprise licenses will increase your network's security, ease your process in achieving compliance standards, and help you extract value from the data you already ingest.

 

 

Splunk Phantom - Automating @ the NOC, SOC, and Beyond: We went over the Splunk Phantom product and participants will gain insight into use cases surrounding alert enrichment, Security Operations Center (SOC) automation, and analyst education. We learned how Phantom can be used as your central incident management platform. Investigate an event and manage the incident lifecycle.