Splunk Enterprise Security (ES) 8.0 Overview
Join us to understand the advancements in Splunk Enterprise Security (ES) 8.0. This release introduces a unified, streamlined interface designed to enhance your security operations. With improved case management and the integration of Mission Control + Threat Intelligence Management (TIM), Splunk ES 8.0 supports more efficient and coordinated threat detection, investigation, and response (TDIR).
A key highlight of Splunk ES 8.0 is its new taxonomy aligned with the Open Cybersecurity Schema Framework (OCSF). This update shifts from Correlation Rules to Findings, now categorised as Intermediate or Full Findings, enabling more accurate threat analysis and automatic aggregation of detections. The release also features new Finding Groups and automatic detection versioning, enhancing the relevance and accuracy of your security insights.
Discover how these new features can help you elevate your security strategy. This session will focus on what’s new in Splunk ES 8.0, offering insights into the latest tools and capabilities designed to optimise your security operations.
Agenda
- Overview of Splunk ES 8.0’s new features and interface enhancements
- Introduction to the new taxonomy and findings categorisation
- Exploration of new tools for enhancing threat detection and response
Who Should Watch
This webinar is ideal for IT security professionals, Splunk administrators, and decision-makers who want to strengthen their security operations using Splunk ES 8.0. It's especially relevant for those looking to explore the latest updates in threat detection and response tools.
Additional Information
- Access to an internet-connected device (preferably a laptop or desktop).
- A working, up-to-date operating system with an updated web browser (Chrome, Firefox, Safari, etc.).
If you have any questions or require support, please email: marketing@somerfordassociates.com.
