Splunk Tech Talks
Deep-dives for technical practitioners.

Maximize the Value from Microsoft Defender with Splunk

melissap
Splunk Employee
Splunk Employee

Microsoft Defender Header.png

 

Join Splunk and Sens Consulting for this Security Edition Tech Talk

Who should attend:  Security Analysts, SOC Managers

Microsoft Defender Threat Vulnerabilities data contains valuable information about software vulnerabilities in your environment. Defender also has device tagging capabilities which will enhance your asset list in Splunk Enterprise Security. So let's get this data into Splunk and elevate your security overview.

 

(view in My Videos)


Tune in for Maximize the value from Microsoft Defender with Splunk to see how to prepare the data in Microsoft Defender and collect and normalize it into the Vulnerability data model. Afterwards you will end up with a dashboard on a System Manager level - revealing the risks both in a specific system and across the organization. All of this is packed into a technical add-on which will be available for you.

Speakers:
Mikael Bjerkeland, Security Sales Engineer, Splunk
Andreas Søvik - Senior Consultant, Sens Consulting
Thomas Hillesøy - Senior Consultant, Sens Consulting

Splunkbase App: Microsoft 365 Defender Threat Vulnerability Add-on for Splunk

 

Contributors

Write for the Community Blog

Have a tip, real-world lesson, or project to share? We’ll partner with you to refine your draft, sharpen your headings, and spotlight your work.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Build resilience for the agentic era: Join us at Splunk Go San Jose

AI is changing how organizations build, operate, and secure digital services. As teams adopt AI agents and ...

Manage Edge Processor pipelines end to end with APIs

This guide uses the Data Management APIs to create an Edge Processor, onboard one instance, deploy a pipeline ...