![Splunk [Security, Compliance and Fraud Track] 2019 .conf Videos w/ Slides](https://cdn-images-3.listennotes.com/podcasts/splunk-security-compliance-and-fraud-track-FVkPC3vp7t4-Pg21I79y4qO.300x300.jpg)
이 에피소드에 관해
Initial compromises happen on your endpoints, so why are you not Splunking them? In this edition of Splunking The Endpoint, we will tell you exactly what to configure in Splunk, and where, why, and how to do so in order to get unparalleled visibility into threats targeting your network. Not only will we revisit popular operating system and open-source endpoint data sources like Sysmon and Osquery, but we'll also talk about various popular commercial EDR products and give you best practices for collecting data from them. Lastly, we'll help you address any doubts about scale problems and licensing costs.Please bring your laptop! We will dive through the latest Boss of the SOC (BOTS) endpoint data and demonstrate the detection techniques needed to answer BOTS questions. Everything you learn will be something you can take home and put into production immediately.
Speaker(s)
James Brodsky, Director, Global Security Kittens, Splunk
Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC2007.pdf?podcast=1577146216
Product: Splunk Enterprise, Splunk Business Flow, Splunk Data Fabric Search and Data Stream Processor
Track: Security, Compliance and Fraud
Level: Good for all skill levels
영어
미국
이 에피소드 내
전사 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
과거 에피소드 검색
Splunk [Security, Compliance and Fraud Track] 2019 .conf Videos w/ Slides의 과거 에피소드를 검색하세요.
이 팟캐스트의 다른 에피소드
![Use Red Team Exercises to Build Alerts, Train Staff, and Drive Policies [Splunk Enterprise, Splunk Enterprise Security]](https://cdn-images-3.listennotes.com/podcasts/splunk-security-compliance-and-fraud-track-DgQuaXzrkBv-Pg21I79y4qO.1400x1400.jpg)
Most of us have had (or still have) nightmares about an alert that someone's exfltrating data from our organization. We've lived that nightmare at Harris, and we've learned from it. In this session, we'll discuss how we used red and purple teaming to improve our security posture post-breach. Learn …
Intel is transforming its approach to security by deploying a new Cyber Intelligence Platform (CIP) based on Splunk, Kafka, and other leading-edge technologies. Our new platform ingests data from hundreds of data sources and security tools, providing context-rich visibility and a common work surfac…
This presentation will discuss how Security Operation Centers (SOCs) will need to change to meet the cybersecurity challenges of the 2020s. The speaker will draw on his experience as a founder of the first SOC-as-a-Service company that delivers managed security services using Splunk. Most industry …
What happens when the call is coming from inside the house? Data exfiltration by insiders is a dangerous threat, but one that often doesn't get the same level of attention as the sexier external ones. We'll start this session with a brief overview of why and how users exfiltrate information, and we…
Deception, automation, and real-time data exploitation help security organizations go on offense vs attackers. In this session we will discuss how to use a variety of deception techniques to gather threat intelligence, how to create an automated response, and how to test response playbooks to valid…
면책 조항: 이 페이지에 포함된 팟캐스트와 작품은 Splunk에서 가져온 것입니다. 이 팟캐스트는 소유자의 재산이며 Listen Notes, Inc.와 제휴하거나 보증하지 않습니다.
