Security
Modifying the Incident Review Page
How to modify the Incident Review page and add information to Notable Events in Splunk Enterprise Security
Dear Buttercup: The Security Letters
A blog series answering the questions of customers around the world about Splunk security products like Splunk Enterprise Security, Splunk Phantom, Splunk ESCU, Spunk UBA and more
Find Your Matching SOC
Splunker Chris Simmons explores the strategic reasons businesses are moving to a Security Operations Center (SOC) model
ATT&CK-ing the Adversary: Episode 3 – Operationalizing ATT&CK with Splunk
In the final episode in the MITRE ATT&CK trilogy, we focus on applying what we learned and operationalizing it with ATT&CK to assist our security operations
ATT&CK-ing the Adversary: Episode 2 - Hunting with ATT&CK in Splunk
Using MITRE ATT&CK to focus your threat hunting in Splunk
Staff Picks for Splunk Security Reading January 2019
A selection of presentations, white papers and blog posts you might have missed in this month (or before), handpicked from the Splunk security world
