Splunk4Rookies - Security

Splunk Core (Enterprise) - Use Cases for Security

Get hands-on with Splunk Core (Enterprise) and learn how to utilise its core features to defend your environment.

This workshop will guide you through practical exercises, demonstrating how to use Splunk Enterprise's data analytics and visualisation capabilities for security monitoring and incident response. Whether you're new to Splunk for Security or looking to solidify your skills, you'll gain valuable experience in identifying and responding to real-world security threats.

Led by Somerford's Splunk Security Experts, Oliver Knapp and Jake Hammacott, this workshop will teach you through real-world scenarios, enabling you to put your learning into action immediately. You'll explore core security functionalities within Splunk Enterprise and learn how to tailor it to meet your organisation’s unique security needs. By the end, you'll feel confident using Splunk to protect your digital assets and respond to incidents quickly and effectively.

Agenda

• Guided Setup of Splunk environments using BOTS data sources
• Introduction to data indexing and basic search functions
• Practical session on monitoring and investigating security threats
• Customising dashboards and alerts for security use cases

Who Should Attend?

• Individuals new to Splunk looking to build foundational skills in security operations
• Security professionals aiming to refine their use of Splunk for enhanced incident response
• Anyone interested in utilising Splunk for effective security monitoring and analysis

Additional Information

• We aim to provide a highly interactive experience, so please join us at the start of the session to engage in hands-on labs.
• To get the most from the session, we ask for respectful and focused participation throughout the workshop. Our hosts are here to guide you and answer any questions.
• After completing the workshop and hands-on labs, you will be eligible to receive a certificate of participation.
• If you cannot complete the labs, we offer future sessions to support your certification journey.

If you need any assistance or have questions, please contact us at marketing@somerfordassociates.com.