We are excited to introduce capabilities that deliver an improved workflow experience for simplified investigations with Splunk Enterprise Security 7.2; enhanced visibility and reduced manual workload; and customized investigation workflows for faster decision-making.

In the last month, the Splunk Threat Research Team (STRT) has had 1 release of new security content via the Enterprise Security Content Update (ESCU) app (v4.12.0.). Read on for the details!

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features made available to Splunk Enterprise Security Cloud users. Read on for the details!

Our latest updates from the Splunk Security Team include many new releases; SOAR, Splunk Enterprise Security and Splunk User Behavior Analytics! Check out all of our September News!

Learn about all of the security content developed from May - July 2023 from Principal Threat Researcher, Michael Haag. 

In the last month, the Splunk Threat Research Team (STRT) has had 4 releases of new security content via the Enterprise Security Content Update (ESCU) app (v4.8.0, v4.9.0, v4.10.0 and v4.11.1). Read on for the details!

Updates on Splunk Attack Analyzer, Splunk AI, SOAR Playbook of the month, Open Cybersecurity Schema Framework, Tech Talks and more...

Learn about new detections and analytic stories now available thanks to the Splunk Threat Research Team.

This blog provides an overview of the process the Splunk Threat Research Team used to develop Atomic Simulations with ChatGPT based on the indicators provided in the report and simulate the activity. It also provides an overview of new security content developed to identify adversaries. Find a more detailed outline of how the team utilized ChatGPT to develop Atomic Simulations in the attached document. 

You can now use Splunk SOAR to automate your security workflows in Mission Control by running actions and creating playbooks to increase your SOC’s efficiency. Check out the demo!

Learn about new detections and analytic stories now available thanks to the Splunk Threat Research Team.

Updates from Splunk Research Team, SOAR Playbook in Mission Control, Security Partnerships, Splunk Essentials Adoption Board and more...

Learn about new detections and analytic stories now available thanks to the Splunk Threat Research Team.

Risk-Based Alerting | Splunk SOAR Playbook of the Month | Machine Learning in Security | Splunk Mission Control | PEAK Framework and more...

We are excited to introduce more Splunk Mission Control benefits to you! Check out the video in this article to learn more about response templates and how they can help your team streamline your workflows.

Learn about new detections and analytic stories available thanks to the Splunk Threat Research Team.

Splunk Mission Control | Identifier Reputation Analysis | RSA Conference 2023 | Digital Resilience | .conf23 Registration and  more....

Announcing Splunk Mission Control and Splunk SOAR 6.0 | Updates from Splunk Threat Research Team | Learn more about Splunk ES 7.1 | RSA conference sessions

Learn about new detections available from the Splunk Threat Research Team. 

In today’s post, I'm excited to share some recent Splunk Mission Control innovations. With Splunk Mission Control, your SOC can detect, investigate and respond to threats from one modern, unified work surface, bringing order to the chaos of your security operations. In Mission Control, you'll have access to Splunk's industry-leading security technologies and partner ecosystem in one place.

Splunk Enterprise Security 7.1 is now available!

New detections are now available in Splunk Enterprise Security via the ESCU app update process or via Splunk Security Essentials (SSE).

New detections are now available in Splunk Enterprise Security via the ESCU app update process or via Splunk Security Essentials (SSE).

New detections are now available in Splunk Enterprise Security via the ESCU app update process or via Splunk Security Essentials (SSE)!

New detections are now available in Splunk Enterprise Security via the ESCU application update process or via Splunk Security Essentials (SSE)!

OCSF Project | Enterprise Security Content Update v3.46.0 | Security Made Stronger with Splunk UBA 5.1 | Splunk Detections

We're excited to share the launch of a brand new piece of functionality to improve your security posture.

Platform | Observability | Security | Product Updates | Splunk Lantern | Splunk Community | Digital Happenings | SplunkBase Apps

Security Highlights

Check out the latest Security Analytics enhancements to Splunk Enterprise Security with our latest 7.0 release.