![Splunk [Phantom] 2019 .conf Videos w/ Slides](https://cdn-images-3.listennotes.com/podcasts/splunk-phantom-2019-conf-videos-w-slides-68PL_92ebxg-ieNmyXGFTI3.300x300.jpg)
À PROPOS DE CET ÉPISODE
Obtaining data to develop defenses against threats is a constant challenge for security analysts. To that end, Splunk's Security Research team developed the Splunk SIEMulator, a framework modeled after Chris Long's DetectionLab that allows a defender to replay attack scenarios using AttackIQ in a simulated environment. SIEMulator’s Attack Range environments are all configured with Splunk forwarders and the apps necessary to create and store data in CIM data models. We'll show you how to use the SIEMulator to produce shareable data that can help security analysts replicate scenarios and effectively detect, investigate, and respond to threats.
Speaker(s)
Phil Royer, Research Engineer, Splunk
Rod Soto, Principal Security Research Engineer, Splunk
Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1671.pdf?podcast=1577146239
Anglais
États-Unis
TRANSCRIPTION 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
RECHERCHER LES ÉPISODES PASSÉS
Rechercher les épisodes précédents de Splunk [Phantom] 2019 .conf Videos w/ Slides.
AUTRES ÉPISODES DANS CE PODCAST
Did you get more staff for heartbleed? How about Shellshock or the OPM breach? Neither did we. The threat landscape is growing faster than ever and we need to cover more bases without more people. Enter Splunk Phantom: automation and integration for the masses. This session will help you understand…
Organizations today struggle with quickly and consistently applying behavior-based threat intelligence across their security tools. The hours needed to stitch together this information manually leave analysts unprepared to quickly turnaround questions from management about their vulnerability to th…
Site Reliability Engineering: Easy to say, harder to do. It can be especially difficult to make sure that all of tenants of SRE are applied to the services you support in a way that is easy for your engineers to adopt. In this session, we will take a look at how you can use Splunk's ITSI, VictorOps…
![Running Splunk in an Air-gapped environment [Splunk Enterprise, Splunk Enterprise Security, Phantom]](https://cdn-images-3.listennotes.com/podcasts/splunk-phantom-2019-conf-videos-w-slides-7d0DyAQCU5i-ieNmyXGFTI3.1400x1400.jpg)
Many government agencies and for-profit companies require that you run Splunk on a network disconnected from the outside Internet. This presents many challenges, including how to cross air gaps and one-way transfers, how to operate indexers in an air-gapped environment, and how to automate backward…
Endpoint security is more than detecting malware. Most insider threats, however, don’t involve malware, but other security issues associated with the user and endpoint. Learn how Cisco’s own InfoSec team uses Cisco Endpoint Security Analytics Built on Splunk and Cisco NGFW integration to increase…
Avertissement: Le podcast et les illustrations intégrés sur cette page proviennent de Splunk, qui est la propriété de son propriétaire et n'est ni affilié ni approuvé par Listen Notes, Inc.
MODIFIER
Merci de nous avoir aidé à tenir la base de données de podcasts à jour.
