Splunk Tech Talks
Deep-dives for technical practitioners.

Mastering Threat Hunting

WhitneySink
Splunk Employee
Splunk Employee

Watch an insightful talk where we dive into the world of threat hunting, exploring the key differences between indicator-based and behavior-based approaches.

Screenshot 2024-10-25 at 8.42.48 AM.png

We'll break down the fundamental concepts behind each method, highlighting their strengths and use cases. Additionally, we'll showcase how you can leverage the power of Recorded Future's threat intelligence within Splunk to execute both indicator and behavior-based threat hunts. Whether you're refining your threat detection strategies or just starting your journey, this session will equip you with practical insights and hands-on techniques to enhance your security operations.

Watch this Tech Talk to learn…

  • Approaches to Threat Detection and Threat Hunting
  • How to identify potentially malicious activity in your own logs that you may have otherwise missed
  • How to mature your SOC practices

Watch Full Tech Talk here:

(view in My Videos)

Tags (1)
Eva_Shirley
Loves-to-Learn

Splunk queries based on CVE vulnerabilities 

Contributors

Write for the Community Blog

Have a tip, real-world lesson, or project to share? We’ll partner with you to refine your draft, sharpen your headings, and spotlight your work.

Get Updates on the Splunk Community!

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...

What's New in Splunk Enterprise Security 8.8 and Beyond

Threats move at machine speed. Keeping up should not depend on having the biggest budget, the largest team, or ...

A Four-Part Event Series: State of Observability - Where AI Meets Performance

As AI agents take on more complex tasks, teams need greater visibility into how they behave, what they cost, ...