Community Office Hours

Wednesday, May 10, 2023

Register here and ask questions below this thread for the Office Hours session on ML in Security: DGA Detection on Wed, May 10, 2023 at 1pm PT / 4pm ET. Join our bi-weekly Office Hour series where technical Splunk experts answer questions and provide how-to guidance on a different topic every month! This is your opportunity to ask questions related to your specific challenge or use case. This Office Hours session is a follow-up to the Tech Talk "ML in Security: Elevate your DGA detection game" and will cover anything related to the deployment of DGA Detection in Splunk and the DGA Deep Learning pre-trained model. Please submit your questions below as comments in advance. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will go in order of the questions posted below, then will open the floor up to live Q&A with meeting participants. If there’s a quick answer available, we’ll post as a direct reply. Look forward to connecting!

0 attendees

0

3

Wednesday, May 24, 2023

Register here and ask questions below this thread for the Office Hours session on ML in Security: Insider Threat Detection on Wed, May 24, 2023 at 1pm PT / 4pm ET. Join our bi-weekly Office Hour series where technical Splunk experts answer questions and provide how-to guidance on a different topic every month! This Office Hours session will cover anything related to how to deploy and use machine learning for insider threat detection. The panel will consist of expert Splunk ML and Threat Researchers. Come with any questions around leveraging the Machine Learning Toolkit app (MLTK), the Data Science and Deep Learning app (DSDL), Enterprise Security, or User Behavior Analytics (UBA) to detect insider threats and accelerate threat hunting with Splunk. Please submit your questions below as comments in advance. You can also head to the #office-hours user Slack channel to ask questions (request access here). Prefer to submit anonymously? Fill out this form. Pre-submitted questions will be prioritized. After that, we will go in order of the questions posted below, then will open the floor up to live Q&A with meeting participants. If there’s a quick answer available, we’ll post as a direct reply. Look forward to connecting!

0 attendees

0

3

Wednesday, October 25, 2023

Register here. This thread is for the Community Office Hours session on Splunk Enterprise Security (ES) on Wed, October 25, 2023 at 1pm PT / 4pm ET. This is your opportunity to ask questions related to your specific Enterprise Security (ES) challenge or use case, including: What’s new in Enterprise Security 7.2 Enterprise Security Content Update (ESCU) app and the latest security content Implementing use cases like RBA, incident management, threat hunting, etc. Implementing threat detections (including 6 new ML-powered detections) Enhancing notable events (e.g., using threat intelligence feeds) Adding adaptive response actions Recommended Splunkbase apps and add-ons for ES use cases Anything else you’d like to learn! Please submit your questions at registration or as comments below. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will go in order of the questions posted below, then will open the floor up to live Q&A with meeting participants. If there’s a quick answer available, we’ll post as a direct reply. Look forward to connecting!

0 attendees

0

2

Wednesday, November 8, 2023

Register here. This thread is for the Community Office Hours session on Splunk Enterprise Security: RBA on Wed, November 8, 2023 at 1pm PT / 4pm ET. This is your opportunity to ask questions related to your specific challenge or use case using Splunk Enterprise Security Risk-Based Alerting. Including: Implementing RBA in Splunk Enterprise Security Best practices for proper creation of risk rules, modifiers, etc. Troubleshooting and optimizing your environment for successful implementation Anything else you’d like to learn! Please submit your questions at registration or as comments below. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will go in order of the questions posted below, then will open the floor up to live Q&A with meeting participants. If there’s a quick answer available, we’ll post as a direct reply. Look forward to connecting!

0 attendees

0

2

Wednesday, November 29, 2023

Register here. This thread is for the Community Office Hours session on Security: SOAR on Wed, Nov 29, 2023 at 1pm PT / 4pm ET. This is your opportunity to ask questions related to your specific Splunk Security orchestration, automation, and response (SOAR) challenge or use case. Including: What's new in SOAR 6.2 (Logic Loops, CyberArk integration, etc.) Attack Analyzer Developing Playbooks, Workbooks and process workflows Integrating security, IT operations and threat intelligence tools Automatic incident response Automating threat hunting, penetration testing, etc. Applying configuration changes, app installation, and maintenance Success measurement Anything else you'd like to learn! Please submit your questions at registration or as comments below. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

1

2

Wednesday, December 13, 2023

Register here. This thread is for the Community Office Hours session on Splunk Search on Wed, Dec 13, 2023 at 1pm PT / 4pm ET. This special 1-hour session is your opportunity to ask questions related to your specific Splunk Search challenge, use case, best practices, or any new features/capabilities in search. Including: Tips & tricks for faster searches, scheduled searches, etc. Best practices for optimizing search performance Using SPL commands Federated search (e.g., for Amazon S3) Creating alerts, visualizations, and dashboards from searches How to translate your questions into SPL Anything else you’d like to learn! Please submit your questions at registration or as comments below. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

1

Wednesday, February 14, 2024

Register here. This thread for the Office Hours session on Dashboards & Dashboard Studio on Wed, Feb 14, 2024 at 1pm PT / 4pm ET. This is your opportunity to ask questions related to your specific Dashboard challenge or use case, including: Getting started with Dashboard Studio Basic dashboard designs (charts, buttons, etc.) How to use searches Advanced interactivity features (drilldowns, maps, dynamic coloring, etc.) Customization (background images, custom layout, colors, etc.) How to migrate your dashboards from Classic to Dashboard Studio Anything else you'd like to learn! Please submit your questions at registration or as comments below. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

1

3

Wednesday, February 28, 2024

Register here. This thread for the Office Hours session on Dashboards & Dashboard Studio on Wed, Feb 28, 2024 at 1pm PT / 4pm ET. This is your opportunity to ask questions related to your specific Dashboard challenge or use case, including: Getting started with Dashboard Studio Basic dashboard designs (charts, buttons, etc.) How to use searches Advanced interactivity features (drilldowns, maps, dynamic coloring, etc.) Customization (background images, custom layout, colors, etc.) How to migrate your dashboards from Classic to Dashboard Studio Anything else you'd like to learn! Please submit your questions at registration or as comments below. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

2

Wednesday, March 13, 2024

Register here. This thread is for the Community Office Hours session with the Splunk Threat Research Team on Generative AI on Wed, Mar 13, 2024 at 1pm PT / 4pm ET. This is your opportunity to ask questions related to your specific Generative AI challenge or use case. Including: Understanding generative AI technologies and techniques The application of AI techniques in cybersecurity How to use Large Language Models (LLMs), Generative Adversarial Networks (GANs), Diffusion Models, and Autoencoders The particular strengths of different generative AI techniques Real-world security scenarios that these techniques can support Practical tips for implementing these techniques to enhance threat detection Anything else you'd like to learn! Please submit your questions at registration or as comments below. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

0

2

Wednesday, March 27, 2024

Register here. This thread is for the Community Office Hours session with the Splunk Threat Research Team on Threat Detection and Response Content on Wed, Mar 27, 2024 at 1pm PT / 4pm ET. This is your opportunity to ask questions about using the latest security content developed by the Splunk Threat Research Team. Including: How to access security content in the Splunk ES Content Update (ESCU) app Best practices and practical tips for using content from the Splunk Threat Research team to enhance threat detection Specific questions about new content that’s been released for detecting DarkGate malware, Office 365 account takeover, and Windows Attack Surface Reduction events Anything else you'd like to learn! Please submit your questions at registration or as comments below. You can also head to the #office-hours user Slack channel to ask questions (request access here). Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants. Look forward to connecting!

0 attendees

1