![Splunk [Security, Compliance and Fraud Track] 2019 .conf Videos w/ Slides](https://cdn-images-3.listennotes.com/podcasts/splunk-security-compliance-and-fraud-track-FVkPC3vp7t4-Pg21I79y4qO.300x300.jpg)
TENTANG EPISODE INI
Obtaining data to develop defenses against threats is a constant challenge for security analysts. To that end, Splunk's Security Research team developed the Splunk SIEMulator, a framework modeled after Chris Long's DetectionLab that allows a defender to replay attack scenarios using AttackIQ in a simulated environment. SIEMulator’s Attack Range environments are all configured with Splunk forwarders and the apps necessary to create and store data in CIM data models. We'll show you how to use the SIEMulator to produce shareable data that can help security analysts replicate scenarios and effectively detect, investigate, and respond to threats.
Speaker(s)
Phil Royer, Research Engineer, Splunk
Rod Soto, Principal Security Research Engineer, Splunk
Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1671.pdf?podcast=1577146216
Product: Splunk Enterprise Security, Splunk User Behavior Analytics, Phantom
Track: Security, Compliance and Fraud
Level: Advanced
Inggris
Amerika Serikat
TRANSKRIP 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
CARI EPISODE TERDAHULU
Cari episode sebelumnya dari Splunk [Security, Compliance and Fraud Track] 2019 .conf Videos w/ Slides.
EPISODE LAIN DALAM PODCAST INI
![Use Deception, Automated Response and Threat Emulation to Make Your Defense Proactive [Splunk Enterprise Security, Splunk Machine Learning Toolkit, Phantom, AI/ML]](https://cdn-images-3.listennotes.com/podcasts/splunk-security-compliance-and-fraud-track-DgQuaXzrkBv-Pg21I79y4qO.1400x1400.jpg)
Deception, automation, and real-time data exploitation help security organizations go on offense vs attackers. In this session we will discuss how to use a variety of deception techniques to gather threat intelligence, how to create an automated response, and how to test response playbooks to valid…
Intel is transforming its approach to security by deploying a new Cyber Intelligence Platform (CIP) based on Splunk, Kafka, and other leading-edge technologies. Our new platform ingests data from hundreds of data sources and security tools, providing context-rich visibility and a common work surfac…
What happens when the call is coming from inside the house? Data exfiltration by insiders is a dangerous threat, but one that often doesn't get the same level of attention as the sexier external ones. We'll start this session with a brief overview of why and how users exfiltrate information, and we…
This presentation will discuss how Security Operation Centers (SOCs) will need to change to meet the cybersecurity challenges of the 2020s. The speaker will draw on his experience as a founder of the first SOC-as-a-Service company that delivers managed security services using Splunk. Most industry …
Most of us have had (or still have) nightmares about an alert that someone's exfltrating data from our organization. We've lived that nightmare at Harris, and we've learned from it. In this session, we'll discuss how we used red and purple teaming to improve our security posture post-breach. Learn …
Sanggahan: Podcast dan karya seni yang disematkan pada halaman ini berasal dari Splunk, yang merupakan milik pemiliknya dan tidak berafiliasi atau didukung oleh Listen Notes, Inc.
Sunting
Terima kasih telah membantu agar basis data podcast tetap terbaru
