If you want to learn more about threat hunting with Splunk, this app in conjunction with the BOTSv2 data set is just the answer!

Splunker John Stoner shares a walkthrough for how to add local threat intelligence into Splunk Enterprise Security

You asked, we delivered – Boss of the SOC 2.0 has been open sourced, including dataset, questions, answers and even a scoring server update!

Laying the groundwork before taking those first crucial steps towards the best SIEM for your business

A brief overview of wire data, its uses and sources, and the new Splunk Essentials for Wire Data app

How to modify the Incident Review page and add information to Notable Events in Splunk Enterprise Security

In the final episode in the MITRE ATT&CK trilogy, we focus on applying what we learned and operationalizing it with ATT&CK to assist our security operations

Using MITRE ATT&CK to focus your threat hunting in Splunk

Discover what's new in Splunk Common Information Model (CIM) 4.12