Highlights
New! Splunk Enterprise Security 7.0
We are thrilled to announce the latest release of Enterprise Security 7.0 is now available for Splunk Cloud and On-Premises customers. This release is packed with new enhancements to provide security teams the critical insights you need to drive faster detection and response.
Executive Summary Dashboard
The new Executive Summary Dashboard surfaces key performance indicators that provide insights on the overall health of the SOC such as:
- Mean Time to Triage
- Mean Time to Resolution
- Investigations Created
- Risk Based Alerting Trends
Cloud Security Monitoring Dashboards
Enterprise Security 7.0 adds to the 6.6 Cloud Security Monitoring updates and gives you enhanced visibility into AWS environments and Microsoft 365 Cloud Security datasets. New dashboards include AWS Security Groups, AWS IAM Activity, AWS Network ACLs, AWS Access Analyzer, and Microsoft 365 Security.
Security Operations Dashboard
Similar to the Executive Summary Dashboard, the Security Operations Dashboard shares key insights but provides deeper analysis capabilities designed for SOC managers and team leads.
Automated Real-Time Content Updates
As new security content becomes available in the Enterprise Security Content Update (ESCU) app, Enterprise Security will proactively notify you so that you always have the latest threat detection techniques from the Splunk Threat Research Team.
Modernized User Experience
Enterprise Security has undergone a large change to the user experience, bringing it in line with other Splunk security products, adopting modern development frameworks and best practices. Also, Splunk Enterprise Security UI now allows you to switch between light and dark modes (Cloud Only), so you can choose what works best for you.
Read our blog to learn more and upgrade to the latest release of Splunk Enterprise Security 7.0. We also would like to invite you to attend the Splunk Security Analytics Virtual Event on January 20th at 9:00 AM PT to see all the latest and greatest from Splunk for Security!
Let us know what you think of the new and enhanced capabilities of Splunk Enterprise Security 7.0 by joining a conversation or starting a new one while you're here on Splunk Community.
Upcoming Tech Talk
What’s New with Enterprise Security 7.0?
1/25/2022 | 11:00 AM PT / 2:00 PM ET
Register to attend and learn about all the latest in Security Analytics innovation coming in the newest release of Splunk Enterprise Security.
