Detections for Trickbots, Malicious PowerShell, and DevSecOps

Intelligence Management with Splunk + TruSTAR

Simplify Ticket Remediation with Machine Learning

Tech Talk: Security Edition. Tune in to see how the Splunk Threat Research Team evaluated more ways to generate security content using native Windows event logging regarding PowerShell Script Block Logging.

Tech Talk: Security Edition. Splunk SOAR is now deployable from the cloud, further delivering on our promise to modernize security operations. Cloud-delivered security makes security operations easier, more agile, and more efficient, helping you stay one step ahead of threats. 

Detecting Trickbot with Splunk

Watch this Part 3 Tech Talk Security Edition. Learn best practices about reporting and metrics for dashboards and visualizations. You’ll also learn how to integrate risk analysis into your overall strategy to elevate your security operations.

Watch this Part 2 Tech Talk Security Edition

Watch this part 2 from Splunk Professional Services to learn best practices to support the foundational piece of every SOC: its people. 

Tech Talk: Security Edition

See how  a Splunk Enterprise search can trigger automated enrichment, an analyst prompt, and rapid response actions to prevent damage caused by malicious account access.

Splunk Product Guidance: Help When and Where You Want It

Awesome Admins: Getting Data In

Tech Talks: Security Edition for Professional Services

Tech Talk: Security Edition. Splunk Security Essentials – also popularly known as SSE – can help strengthen your security strategy.

We are releasing a new community playbook for Splunk Phantom to help enrich suspicious email events. This playbook focuses specifically on domain names contained in the ingested email, and it uses Cisco Umbrella Investigate to add the risk score, risk status and domain category to the event in Phantom.

View our Tech Talk: Security Edition, Splunk Phantom App Building the Easy Way

View our Tech Talk: Platform Edition, Seamlessly Search Your Data Wherever it Lives with Splunk Federated Search

View our Tech Talk: Platform Edition, Dashboard Studio: Reimagine What You Can Do with Your Dashboards

View our Tech Talk, Platform Edition: Splunk Operator for Kubernetes: Effortlessly Deploy, Scale, and Manage Splunk

View our Tech Talk, Security Edition: Splunk SOAR Playbooks: Conducting an Azure New User Census

View our Tech Talk: Security Edition, Protect Against Crypto-Jacking Malware with Strong DevSecOps Practices and Splunk

View our Tech Talk: Platform Edition: Get Started to be PCI Compliant

View our Tech Talk: Security Edition, Splunk SOAR Playbook – Malware Triage with Crowdstrike and Splunk Phantom

View our Tech Talk: Security Edition, Splunk Connect for Syslog: Ingest Security Data

View our Security Tech Talk: Splunk SOAR Playbook – Finding and Disabling Inactive Users on AWS

View our Platform Tech Talk: Save Time with Intermediate Splunk Search Skills 

View our Tech Talk: Security Edition, Detect SolarWinds Cyberattack with Splunk Enterprise Security

View our Tech Talk: Security Edition, ES and ITSI Sitting in a Tree: How to use Notable Events to make Security and IT Collaboration Better

View our Tech Talk: Security Edition,  Super Speed with Phantom Slash Commands

View our Tech Talk: Platform Edition, Detecting Account Takeover (ATO) Fraud

View our Tech Talk: Security Edition, Understanding Phantom’s Join Logic