Announcing the General Availability of Splunk® Enterprise Security 8.0

At .conf24 we unveiled the private preview of Splunk Enterprise Security 8.0, and the buzz was undeniable.

Today, we are thrilled to announce that Splunk Enterprise Security 8.0 is now generally available! This isn’t just another release—it’s a massive leap forward that redefines and revolutionizes security operations.

Splunk Enterprise Security 8.0 is the cornerstone of the SOC of the Future. With groundbreaking advancements featuring a seamless investigation and case management solution that includes integrated automation with Splunk SOAR1, Splunk Enterprise Security 8.0 delivers the most seamless analyst experience across the threat detection, investigation, and response (TDIR) workflow.

We Promised the SIEM of the Future. And We Delivered.

Splunk Enterprise Security 8.0 revolutionizes the SOC workflow experience from the ground up. Now security analysts can seamlessly detect what matters, investigate holistically, and respond to threats —faster and more efficiently than ever before. The SIEM of the future is here: unified TDIR with automated workflows, modern aggregation and triage capabilities, enhanced detections and simplified terminology.

For far too long, SOC teams have struggled with disjointed tools and processes. With Splunk Enterprise Security 8.0, those days are over. Here’s how we’re revolutionizing the SOC workflow experience and boosting analyst productivity:

A Game-Changing Unified Work Surface. No More Pivoting Between Tools.

Say goodbye to spending extra time pivoting between tools. Imagine doing everything from one modern, unified interface. Now with the direct integration of Splunk SOAR playbooks and actions with the case management and investigation features of Splunk Enterprise Security and Mission Control, analysts can handle everything from detection, investigation and response without switching context. This significantly boosts operational efficiency by providing a unified solution for data aggregation, analysis, and automation—without leaving Splunk Enterprise Security.

Find and Automate What Matters, Faster: Say Hello to Finding Groups2

Now, with Finding Groups, you can view all related high-fidelity findings in one click. Finding Groups automatically aggregates findings based on predetermined rules against common security grouping techniques and calculations. This further simplifies the SOC analyst experience to take action and respond to sophisticated threats. But we didn’t stop there. Now, with native Splunk SOAR integration, analysts can leverage Automation Rules to assign playbooks to specific detections, enabling those playbooks to run automatically whenever designated findings are triggered in Splunk Enterprise Security. Unifying these capabilities enables the SOC to accelerate their automation journey—all through a single view.

Seamlessly Implement a Risk-based Alerting Detection Strategy

New, enhanced detections provide turnkey capabilities to build high-confidence aggregated alerts for investigations. We also added native, automatic detection versioning within Enterprise Security Content Updates (ESCU) and customer-owned detections.

Breaking Down Data Silos: Simplified Terminology, Aligned with OCSF

With simplified terminology across TDIR workflows, Splunk Enterprise Security now aligns with the Open Cybersecurity Schema Framework (OCSF). This ensures that every SOC analyst speaks the same language within the TDIR workflow, creating a truly seamless experience.

The Market-Leader in SIEM. The Proof is in the Recognition.

The industry recognition keeps rolling in. This year, we celebrated being recognized as a Leade r ten times in a row in the 2024 Gartner® Magic Quadrant™ for SIEM. But that’s not all, Splunk was ranked first in every Use Case in the 2024 Gartner® Critical Capabilities for Security Information and Event Management.

And if that’s not enough to get excited about—Splunk has been ranked #1 for the fourth consecutive year in the IDC Worldwide Security Information and Event Management Market Shares, 2023: The Leaders in SIEM City (doc # US52525024, September 2024) report.

Splunk has also been named a Leader in the IDC MarketScape: Worldwide SIEM for Enterprise 2024 Vendor Assessment (doc #US49029922, September 2024).

Splunk Enterprise Security 8.0 is available now for cloud and on-premise environment customers. Please reach out to your account representative for more information.

Watch our on-demand discussion featuring Forrester’s Allie Mellen on trends in today’s SIEM market. You'll also learn more about how Splunk is revolutionizing the analyst experience with Splunk® Enterprise Security 8.0 through native integration with Splunk SOAR.

We’re always listening! Have ideas and requests? Share them with us through Splunk Ideas.

We’re building the SOC of the Future together. To learn more about Splunk Enterprise Security, visit our website. Happy Splunking!

1Splunk SOAR Cloud subscription required

2 *In preview with Splunk Enterprise Security 8.0

/en_us/blog/fragments/enterprise-security-tour
Style
two-column

Related Articles

Splunk Named a Leader in the 2022 IDC MarketScape for SIEM
Security
2 Minute Read

Splunk Named a Leader in the 2022 IDC MarketScape for SIEM

See why Splunk earned a spot in the 'Leaders' category in the 2022 IDC MarketScape for worldwide SIEM software.
Visualising a Space of JA3 Signatures With Splunk
Security
2 Minute Read

Visualising a Space of JA3 Signatures With Splunk

One common misconception about machine learning methodologies is that they can completely remove the need for humans to understand the data they are working with. In reality, it can often place a greater burden on an analyst or engineer to ensure that their data meets the requirements, cleanliness and standardization assumed by the methodologies used. However, when the complexity of the data becomes significant, how is a human supposed to keep up? One methodology is to use ML to find ways to keep a human in the loop!
Machine Learning in Security: Deep Learning Based DGA Detection with a Pre-trained Model
Security
8 Minute Read

Machine Learning in Security: Deep Learning Based DGA Detection with a Pre-trained Model

The Splunk Machine Learning for Security team introduces a new detection to detect Domain Generation Algorithms generated domains.
Detecting Cloud Account Takeover Attacks: Threat Research Release, October 2022
Security
10 Minute Read

Detecting Cloud Account Takeover Attacks: Threat Research Release, October 2022

The Splunk Threat Research Team shares a closer look at the telemetry available in Azure, AWS and GCP and the options teams have to ingest this data into Splunk.
From Macros to No Macros: Continuous Malware Improvements by QakBot
Security
13 Minute Read

From Macros to No Macros: Continuous Malware Improvements by QakBot

This blog, the Splunk Threat Research Team (STRT) showcases a year's evolution of QakBot. We also dive into a recent change in tradecraft meant to evade security controls. Last, we reverse engineered the QakBot loader to showcase some of its functions.
Splunk Integrates with Amazon Security Lake to Deliver Analytics Using the Open Cybersecurity Schema Framework
Security
2 Minute Read

Splunk Integrates with Amazon Security Lake to Deliver Analytics Using the Open Cybersecurity Schema Framework

We're proud to be one of the early partners of Amazon Security Lake, allowing joint Splunk and AWS customers to efficiently ingest the OCSF-compliant data to help improve threat detection, investigation and response.
How Good is ClamAV at Detecting Commodity Malware?
Security
2 Minute Read

How Good is ClamAV at Detecting Commodity Malware?

We ran over 400,000 instances of malware to see how good ClamAV really is. Here's the data.
NIS2 is coming… What does it mean?
Security
6 Minute Read

NIS2 is coming… What does it mean?

On 28th November, European Member States formally adopted the revision of the Network and Information Security Directive (NIS2) (EN, DE, FR). The Directive will enter into force before the end of the year, but will only be applicable after EU Member States transpose the Directive into national law - by September 2024. So now is the time for a heads-up about the upcoming changes and what they will mean for your cybersecurity operations.
Staff Picks for Splunk Security Reading November 2022
Security
2 Minute Read

Staff Picks for Splunk Security Reading November 2022

Hello, everyone! Welcome to the Splunk staff picks blog. Each month, Splunk security experts curate a list of presentations, whitepapers, and customer case studies that we feel are worth a read. We hope you enjoy.
/en_us/blog/fragments/about-splunk
/en_us/blog/fragments/subscribe-footer