Does Splunk offers active threat hunting training?

[itsmevic]

Hi All -
Does anyone know if Splunk offers active threat hunting training? i.e. Tips, tricks, techniques, etc.

[genesiusj · Accepted solution]

@itsmevic
I'm not an expert on the security side of Splunk just yet. We are only using for operations.
I was not able to find any training from Splunk for threat hunting.

However, performing a few searches I found the following:

• https://infosecaddicts.com/course/advanced-threat-hunting-with-splunk/
• https://www.splunk.com/en_us/blog/security/hunting-with-splunk-the-basics.html
• https://splunkbase.splunk.com/app/4305/
• https://blog.augustschell.com/3-tips-for-threat-hunting-with-splunk

While none of this is specifically about training, perhaps there are links or resources within that will lead you to a better answer.

Also, would recommend, if your company budget can support it, look into training from a Splunk partner. Our partner is aditum. Their staff cover a vast range of technical knowledge; however, they are strictly a Splunk integrator.

Go luck.

Thanks and God bless,
Genesius

PS Forgot there were also 8 references on Splunk's resources page. Go there and check for the word "threat".

https://www.splunk.com/en_us/resources.html

[itsmevic]

Informative reply. Thank you kindly.