Splunk Enterprise Security Virtual Workshop

Join us for a virtual workshop where users will have the opportunity to walk through multiple real-world scenarios and see first-hand how Enterprise Security can be used from the creation of a notable event to investigate to the raw event that identifies the adversary's action.

 
The workshop leverages the popular Boss of the SOC (BOTS) dataset and is laid out in an interactive format. Users will leave with a better understanding of how Splunk and Enterprise Security can be used to generate notable events and investigate them as they occur in the enterprise.

The workshop agenda includes:

• A brief overview of Enterprise Security
• A web application vulnerability incident
• ATP incident
• Spyware/Malware Incident
• Enterprise Security Content Update (ESCU) overview and familiarization