Splunk Tech Talks
Deep-dives for technical practitioners.

Mastering Threat Hunting

WhitneySink
Splunk Employee
Splunk Employee

Watch an insightful talk where we dive into the world of threat hunting, exploring the key differences between indicator-based and behavior-based approaches.

Screenshot 2024-10-25 at 8.42.48 AM.png

We'll break down the fundamental concepts behind each method, highlighting their strengths and use cases. Additionally, we'll showcase how you can leverage the power of Recorded Future's threat intelligence within Splunk to execute both indicator and behavior-based threat hunts. Whether you're refining your threat detection strategies or just starting your journey, this session will equip you with practical insights and hands-on techniques to enhance your security operations.

Watch this Tech Talk to learn…

  • Approaches to Threat Detection and Threat Hunting
  • How to identify potentially malicious activity in your own logs that you may have otherwise missed
  • How to mature your SOC practices

Watch Full Tech Talk here:

(view in My Videos)

Tags (1)
Contributors
Get Updates on the Splunk Community!

Tuning Edge Processor in Hybrid Mode: What Limits Each Data Path

When you run Edge Processor in hybrid mode, alongside a Splunk heavy forwarder on the same host, two questions ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Request for Professional Development: Attending .conf26

Winning Over the Boss: Your Pass to .conf26 conf26 is going to be here before you know it. If don't already ...