Splunk [Enterprise] 2019 .conf Videos w/ Slides
Splunk [Enterprise] 2019 .conf Videos w/ Slides
✓

Splunking the Endpoint V: Hands On with BOTSv4 Data [Splunk Enterprise, Splunk Business Flow, Splunk Data Fabric Search and Data Stream Processor]

01:49:55
Podcasts
RSS
Link

SOBRE ESTE EPISÓDIO

Initial compromises happen on your endpoints, so why are you not Splunking them? In this edition of Splunking The Endpoint, we will tell you exactly what to configure in Splunk, and where, why, and how to do so in order to get unparalleled visibility into threats targeting your network. Not only will we revisit popular operating system and open-source endpoint data sources like Sysmon and Osquery, but we'll also talk about various popular commercial EDR products and give you best practices for collecting data from them. Lastly, we'll help you address any doubts about scale problems and licensing costs.Please bring your laptop! We will dive through the latest Boss of the SOC (BOTS) endpoint data and demonstrate the detection techniques needed to answer BOTS questions. Everything you learn will be something you can take home and put into production immediately.

Speaker(s)
James Brodsky, Director, Global Security Kittens, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC2007.pdf?podcast=1577146230

Tecnologia
Inglês
Estados Unidos da América
UseAPIpara buscar este episódio emJSON

NESTE EPISÓDIO

Editar estas etiquetas

TRANSCRIÇÃO 🔗

Are you the producer of this podcast? Add a podcast transcript
Need Audio-to-Text? Transcribe with Listen411 in Just 60 Seconds

PESQUISAR EPISÓDIOS PASSADOS

Pesquisar episódios anteriores de Splunk [Enterprise] 2019 .conf Videos w/ Slides.
Incorpore esta barra de pesquisa ao seu site

OUTROS EPISÓDIOS NESTE PODCAST

Using Splunk and its premium solution to accelerate DevOps lifecycle [Splunk Enterprise, Splunk IT Service Intelligence, VictorOps]

Using Splunk and its premium solution to accelerate DevOps lifecycle [Splunk Enterprise, Splunk IT Service Intelligence, VictorOps]

As more technology organizations pursue agility and move towards continuous delivery, a stable and reliable IT infrastructure is the foundation that enables the transformation. However, the increasing complexity of the underlying infrastructure also brings a lot of challenges. Splunk has built a va…
00:42:34
PARTILHAR
GUARDAR
Using Splunk and DNS to detect that your domains are being abused for phishing [Splunk Enterprise, Splunk Enterprise Security]

Using Splunk and DNS to detect that your domains are being abused for phishing [Splunk Enterprise, Splunk Enterprise Security]

As a high-profile public-sector organization, the Dutch Tax and Customs Administration deals with criminals claiming to be representatives of the organization and contacting the public with phishing e-mails every day. By using Splunk and RFC’s like, RFC7208 – Sender Policy Framework (SPF) for Autho…
00:37:27
PARTILHAR
GUARDAR
Unleash your inner Picasso: experience the new Splunk dashboards [Splunk Enterprise, Splunk Cloud, Splunk IT Service Intelligence]

Unleash your inner Picasso: experience the new Splunk dashboards [Splunk Enterprise, Splunk Cloud, Splunk IT Service Intelligence]

Seeking guidance to help create amazing Splunk dashboards? Want to wow your team as well as your execs and become THE dashboard master? Come learn about Splunk's new dashboarding capabilities, and experience rich dashboard examples as well as the art of the possible. We will demo a variety of dashb…
00:44:08
PARTILHAR
GUARDAR
Use Red Team Exercises to Build Alerts, Train Staff, and Drive Policies [Splunk Enterprise, Splunk Enterprise Security]

Use Red Team Exercises to Build Alerts, Train Staff, and Drive Policies [Splunk Enterprise, Splunk Enterprise Security]

Most of us have had (or still have) nightmares about an alert that someone's exfltrating data from our organization. We've lived that nightmare at Harris, and we've learned from it. In this session, we'll discuss how we used red and purple teaming to improve our security posture post-breach. Learn …
00:34:24
PARTILHAR
GUARDAR
Using Machine Learning to Unlock the Potential of Your Security Data [Splunk Enterprise, Splunk Cloud]

Using Machine Learning to Unlock the Potential of Your Security Data [Splunk Enterprise, Splunk Cloud]

Vectra customers and security researchers respond to some of the world’s most consequential threats. And they tell us that there’s a consistent set of questions they must answer when investigating any attack scenario.Yet, security data today is broken and unable to effectively answer those question…
00:34:53
PARTILHAR
GUARDAR
Aviso: O podcast e a arte incorporada nesta página são de Splunk, que é propriedade de seu proprietário e não é afiliado ou endossado por Listen Notes, Inc.
PROMOTED
The best Podcast API to search all podcasts and episodes. Trusted by 15,200+ companies and developers.
The best Podcast API to search all podcasts and episodes. Trusted by 15,200+ companies and developers.
PodcastAPI.com

RECOMENDAÇÕES
Use a API para ir buscar este episódio