Security Blogs

Latest Articles

Boss of the SOC (BOTS) Investigation Workshop for Splunk
Security
3 Minute Read

Boss of the SOC (BOTS) Investigation Workshop for Splunk

You've played BOTS with Splunk, now learn the how it all happened? This post discusses a new tutorial app that you can run on the BOTS v1 dataset to learn more about BOTS and have an educational workshop at home (or office)
Boss of the SOC Scoring Server, Questions and Answers, and Dataset! Open-Sourced and Ready for Download
Security
2 Minute Read

Boss of the SOC Scoring Server, Questions and Answers, and Dataset! Open-Sourced and Ready for Download

We have open-sourced the Boss of the SOC dataset (ver1.0) and BOT(S|N) scoring server. They can be used to run your own CTF, perform research, or train your internal users!
Strengthen Your SIEM And Be Ready For The GDPR
Security
1 Minute Read

Strengthen Your SIEM And Be Ready For The GDPR

When facing the GDPR, your SIEM solution can be a great support for your organisation's compliance strategy, but if not strengthened - it can also be your downfall.
Use Investigation Workbench to Reduce Time to Contain and Time to Remediate
Security
2 Minute Read

Use Investigation Workbench to Reduce Time to Contain and Time to Remediate

The latest version of Splunk Enterprise Security v 5.0 introduces Investigation Workbench, which streamlines investigations and accelerates incident response
Detecting Typosquatting, Phishing, and Corporate Espionage with Enterprise Security Content Update
Security
3 Minute Read

Detecting Typosquatting, Phishing, and Corporate Espionage with Enterprise Security Content Update

Splunk’s Enterprise Security Content Update (ESCU) app can provide you with early warnings and situational awareness—powerful elements of an effective defense against adversaries
Ensuring Success with Splunk ITSI - Part 1: Thresholding Basics
Security
8 Minute Read

Ensuring Success with Splunk ITSI - Part 1: Thresholding Basics

Practical step-by-step guidance to configure ITSI to produce accurate and trusted alerts
Splunk Named a Leader in Gartner SIEM Magic Quadrant for the Fifth Straight Year
Security
2 Minute Read

Splunk Named a Leader in Gartner SIEM Magic Quadrant for the Fifth Straight Year

Gartner's 2017 Magic Quadrant for Security Information and Event Management names Splunk a leader for the fifth straight year
What’s Cyber Security Week like for Splunk? it-sa gold!
Security
1 Minute Read

What’s Cyber Security Week like for Splunk? it-sa gold!

Two gold awards and a successful it-sa event - that's how Splunk does Cyber Security Week!
What You Need to Know About Boss of the SOC
Security
3 Minute Read

What You Need to Know About Boss of the SOC

We introduced a new security activity at .conf2016 called “Boss of the SOC” (or BOTS), born from our belief that learning can be both realistic and fun.