Splunk Security Essentials 3.0: Driving the Content that Drives You [Splunk Enterprise, Splunk Enterprise Security, Splunk User Behavior Analytics]

Whether you have just SSE or all of Splunk's Premium Products, you can benefit from the ton of Security Content that Splunk produces. We'll start this session by setting a quick baseline on all of the fantastic detections that Security Essentials has had in the past, and then jump into the new prescriptive guides, MITRE ATT&CK™ integration, Auto-Dashboard-Magic, and all the related functionality that will help you plan your usage of any/all of Splunk's security products. We'll present all this information through the lens of helping you get the best possible detections deployed with the least amount of effort.

Speaker(s)
David Veuve, Principal Security Strategist, Splunk
Johan Bjerke, Principal Sales Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC2013.pdf?podcast=1577146258