How to manage intelligence upstream to enhance phishing triage flows, enrich investigations, and improve priority scoring.

 How the admin console can save you time and give you more control 

Learn how and why to migrate to Splunk 9.0

Watch Now  | Tech Talk: Platform Edition 

Splunk Cloud Migration Assessment App

ACS is already enabled in your environment! It’s ready to use out of the box.

We will cover the most common Lateral Movement techniques affecting Microsoft environments and how to detect this behavior using Splunk.

Splunk Intelligence Management for Splunk SOAR

Automation for the Modern SOC: Splunk SOAR’s New App Editor

Detections for Trickbots, Malicious PowerShell, and DevSecOps

Intelligence Management with Splunk + TruSTAR

Simplify Ticket Remediation with Machine Learning

Tech Talk: Security Edition. Tune in to see how the Splunk Threat Research Team evaluated more ways to generate security content using native Windows event logging regarding PowerShell Script Block Logging.

Tech Talk: Security Edition. Splunk SOAR is now deployable from the cloud, further delivering on our promise to modernize security operations. Cloud-delivered security makes security operations easier, more agile, and more efficient, helping you stay one step ahead of threats. 

Detecting Trickbot with Splunk

Watch this Part 3 Tech Talk Security Edition. Learn best practices about reporting and metrics for dashboards and visualizations. You’ll also learn how to integrate risk analysis into your overall strategy to elevate your security operations.

Watch this Part 2 Tech Talk Security Edition

Watch this part 2 from Splunk Professional Services to learn best practices to support the foundational piece of every SOC: its people. 

Tech Talk: Security Edition

See how  a Splunk Enterprise search can trigger automated enrichment, an analyst prompt, and rapid response actions to prevent damage caused by malicious account access.

Splunk Product Guidance: Help When and Where You Want It

Awesome Admins: Getting Data In

Tech Talks: Security Edition for Professional Services

Tech Talk: Security Edition. Splunk Security Essentials – also popularly known as SSE – can help strengthen your security strategy.

We are releasing a new community playbook for Splunk Phantom to help enrich suspicious email events. This playbook focuses specifically on domain names contained in the ingested email, and it uses Cisco Umbrella Investigate to add the risk score, risk status and domain category to the event in Phantom.

View our Tech Talk: Security Edition, Splunk Phantom App Building the Easy Way

View our Tech Talk: Platform Edition, Seamlessly Search Your Data Wherever it Lives with Splunk Federated Search

View our Tech Talk: Platform Edition, Dashboard Studio: Reimagine What You Can Do with Your Dashboards

View our Tech Talk, Platform Edition: Splunk Operator for Kubernetes: Effortlessly Deploy, Scale, and Manage Splunk

View our Tech Talk, Security Edition: Splunk SOAR Playbooks: Conducting an Azure New User Census

View our Tech Talk: Security Edition, Protect Against Crypto-Jacking Malware with Strong DevSecOps Practices and Splunk

View our Tech Talk: Platform Edition: Get Started to be PCI Compliant