Hunting in the Microsoft Cloud hands-on workshop is designed to show how to hunt using Splunk Enterprise and Splunk Enterprise Security in events generated from Microsoft Azure and Office 365. This workshop provides users an opportunity to gain familiarity with data collected within the Microsoft Cloud and then apply that knowledge to conducting a hunt using these same data sources. Attendees will leave with a better understanding of how Splun...

Enterprise Security is a modular, hands-on workshop designed to familiarise participants with how to investigate incidents using Splunk Enterprise and Splunk Enterprise Security. This workshop provides users an opportunity to walk through multiple scenarios and see first-hand how Enterprise Security can be used from the creation of a notable event to investigate all the way to the raw event that identifies the adversaries action. The workshop...

This is a scenario-based hands-on workshop designed for Splunk security customers already in or moving into AWS. The scenarios use different pieces of cloud-focused data and include a key compromise, a public S3 bucket, and network attacks which incorporate content from ESCU or SSE to detect and investigate malicious activity. The workshop leverages the popular Boss of the SOC (BOTS) v3 dataset and is laid out in an interactive format. Please...

A 3 hour session where attendees will get an introduction to Splunk's Machine Learning Toolkit (MLTK). They will gain hands-on experience where they are given Machine Learning Challenges to be solved and results collected on dashboards in their own AWS hosted Splunk instance. During this interactive, hands on workshop we will also cover Exploratory Data Analysis and how to detect outliers and more! Who should attend? Existing Splunk users who...

Splunking the Endpoint is a modular, hands-on workshop designed to familiarize participants with different endpoint technologies and how to leverage Splunk to gain greater insight into the activities occurring on the endpoint. This workshop provides users a way to gain familiarity with various endpoint logging tools, including Microsoft Event Logs, Sysmon, PowerShell, osquery, CB and Cisco NVM, as well as introduces them to Splunk Security Ess...

You're invited to join us for a Splunk Security Operations Suite Virtual workshop on January 19, 2021 at 1pm ET where Splunk experts will demonstrate how to use our security suite to better optimize your organization’s security operations to investigate, monitor, analyze and respond to security incidents. The goal is to help you develop and implement an effective investigative strategy – one that addresses a broad range of security...

Join us for the Splunk for Security Virtual Lunch and Learn Workshop on January 13th at 1pm ET where you will learn how to leverage Splunk to search security events. This 2-hour hands-on workshop is a great opportunity for you to discover the value of Splunk, continue your professional development and learn more about leveraging data within your organization. During this workshop you will: * Familiarize yourself with the Splunk interface * Sea...

The security needs of Industrial Control Systems (ICS) and Operational Technology (OT) environments are changing. These devices are critical to production, manufacturing, power, and utilities, but they have no inherent security, and, increasingly, they are getting connected to enterprise networks. That creates a perfect storm for cyberattacks: OT devices that traditional security products can’t see or protect and vulnerable IT devices th...

You're invited to join us for a Splunk Phantom hands-on workshop on December 16th at 1pm EST. In this workshop you will learn to use Splunk Phantom to respond to incidents, manage cases and artifacts, as well as automate your incident response and other standard operating procedures.Users will have the opportunity to walk through a real-world scenario and see first-hand how Phantom can be used from the creation of a notable event to enriching...

DoD has been growing year over year, investing in Splunk to support continuous monitoring, IT operations, and a number of other use cases. In February, Carahsoft signed a five-year ESI agreement with Splunk. The agreement is a DoD-wide BPA that allows customers to leverage Splunk. Join us as we discuss: How the contract has been structured The value it brings to DoD How to leverage the contract Splunk use cases SIEM capabilities Security Essen...