BOTS at .conf23 Wrap Up and Worldwide BOTS Day!

By Tom Smit

Splunk customers and partners had an excellent night Monday night at .conf23. We kicked off the festivities at 8:00 p.m and rocked BOTS through till midnight. After four hours, 56 New Wave songs, a make your own donut bar, and a ton of fun, BOTSv8 made its successful debut on Monday the 17th of July. Some quick |stats about the competition: over 50 Splunkers gathered to help produce BOTS this year, there were 350 total players that answered questions, and 13k answers submitted with a 50% success rate. There were 35 attempts at the most difficult question in the game, with zero people actually getting it correct. Maybe next time!

The top three teams that placed this year were:

First Place: Consist (consisting of the partner Consist)
Second Place: lizard People (consisting of customers and partners)
Third Place: Ctrl_Alt_Defeat (consisting of players from VMWare)

^{Image credit: Consist}

BOTSv8 Worldwide BOTS Day!

We always knew that we wanted to take BOTSv8 big! And we’re taking it worldwide this year. Splunk is hosting two worldwide BOTSv8 competitions on Wednesday, August 30 or Thursday, August 31 depending on where you’re located in the world. Here are the details:

BOTSv8 Virtual Session 1: 30-August-23 - 08:00 Pacific (UTC -7)
BOTSv8 Virtual Session 2: 30-August-23 - 20:00 Pacific (UTC -7)

These times were chosen to make sure every time zone in the world would be able to participate. Kickoff will start at the time listed above with a 30 minute BOTS introduction and then the competition will start at 30 minutes past the hour.

How to Register for Worldwide BOTS Day 2023

Both events are available for signup on the BOTS portal.

Fine Print: Any players who participated at .conf23 in person for BOTSv8 will not be able to place within the top 3 in these virtual events. We’re more than happy to have you participate and enjoy yourself, but we want to make it a fun time for everyone playing.

We all hope that those of you who attended .conf23 had an amazing time at the competition. We also hope to see all of you who haven’t yet got a chance to play at Worldwide BOTS Day! Check out our previous blog post for some tips and tricks on how to prepare.

Thanks to everyone who made BOTSv8 at .conf23 a huge success. Here’s to more BOTS in the coming year!

Tom Smit

Tom Smit is a Principal Security Strategist at Splunk and has been a Splunker for eight years. He is active at Splunk as a voice for security, is a strong advocate of security workshops, sharing his experience, and bringing Splunk and security together for customers. During his time at Splunk he has been involved with content creation of Boss of the SOC v3, v4, v5, and head the v6 and v7 programs. Before joining Splunk, Tom held sales engineering, professional services, and product roles at Symantec, Mimecast, Raytheon, and Core Security.

Security 2 Min Read

Splunk SOAR Playbook of the Month: Investigations with Playbooks

For this month’s edition of Playbook of the Month, we’ll look at how you can perform investigations at machine speed using Splunk SOAR and one of our investigation playbooks, Internal Host WinRM Investigate.

Security 7 Min Read

7 questions all CxOs should ask to increase cyber resilience before buying more software

Here are 7 questions you should always ask to help your organisation to make the best possible purchase and increase its cyber resilience at the same time.

Security 11 Min Read

Breaking the Chain: Defending Against Certificate Services Abuse

Explore the common certificate abuses leveraged by current and relevant adversaries in the wild, the multiple methods they use to obtain certificates, how to gather relevant logs and ways to mitigate adversaries stealing certificates.

About Splunk

The world’s leading organizations rely on Splunk, a Cisco company, to continuously strengthen digital resilience with our unified security and observability platform, powered by industry-leading AI.

Our customers trust Splunk’s award-winning security and observability solutions to secure and improve the reliability of their complex digital environments, at any scale.