Using Splunk to Catch Theft Rings [Splunk Enterprise, Splunk Enterprise Security]

We helped our client use Splunk to disrupt theft rings plaguing its retail stores. We'll present how we took in public wifi data, tracked MAC addresses that appeared in multiple stores, and ultimately created a system in Splunk that alerted in-store loss prevention teams when individuals likely to be involved in theft rings entered the store. We'll go over the steps taken to operationalize our theft deterrence program so that you can adopt it in your organization or modify it to fit your needs.

Speaker(s)
Nic Haag, Splunk Professional Services Consultant, Aditum Partners
Logan Foshee, Threat Analyst, Lowe's

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1336.pdf?podcast=1577146216

Product: Splunk Enterprise, Splunk Enterprise Security
Track: Security, Compliance and Fraud
Level: Advanced