Splunk Tech Talks
Deep-dives for technical practitioners.

Maximize the Value from Microsoft Defender with Splunk

melissap
Splunk Employee
Splunk Employee

Microsoft Defender Header.png

 

Join Splunk and Sens Consulting for this Security Edition Tech Talk

Who should attend:  Security Analysts, SOC Managers

Microsoft Defender Threat Vulnerabilities data contains valuable information about software vulnerabilities in your environment. Defender also has device tagging capabilities which will enhance your asset list in Splunk Enterprise Security. So let's get this data into Splunk and elevate your security overview.

 



Tune in for Maximize the value from Microsoft Defender with Splunk to see how to prepare the data in Microsoft Defender and collect and normalize it into the Vulnerability data model. Afterwards you will end up with a dashboard on a System Manager level - revealing the risks both in a specific system and across the organization. All of this is packed into a technical add-on which will be available for you.

Speakers:
Mikael Bjerkeland, Security Sales Engineer, Splunk
Andreas Søvik - Senior Consultant, Sens Consulting
Thomas Hillesøy - Senior Consultant, Sens Consulting

Splunkbase App: Microsoft 365 Defender Threat Vulnerability Add-on for Splunk

 

Contributors
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...