WEBINAR

Build a Security Portfolio That Strengthens Your Security Posture

Learn way to gain visibility and control of your organization’s security posture and answer fundamental questions of “what, who, when, where, how, and what do I do next” Get a “single source of truth” to make well-informed security decisions enabling any security professional to answer these questions quickly and effectively.

In this session, you will learn how to:

• Centrally analyze existing security technologies to gain end-to-end visibility to your security posture
• Streamline and improve incident investigations by using the “analytics cycle”
• Apply 4 basic, straightforward methods to immediately help improve posture
• Improve security preparedness and reduce risk by map to critical controls
• Orient teams around an analytics-driven approach to SecOps – from monitoring to detection to IR

Building an Analytics Driven Security Operation Center using Splunk Enterprise Security

Learn best practices for deploying an analytics-enabled SOC with our security expert. Whether you are interested in building a SOC, enhancing an existing SOC or building out a security practice, this session will explain the people, processes and technology required. The discussion will also cover how Splunk can complement a SIEM that may already be in place in the SOC.

An End-To-End Approach: Detect via Behavior and Orchestrate via SIEM

Newer ways to detect threats are developed as technology advances over. The rule applies regardless of whether the threats center around compromised accounts, privileged account abuse, insider attacks, data exfiltration, algorithmically generated domain names, beaconing activity or more. The Splunk portfolio of products can help you address these use cases foundationally by using a behavior-centric approach. The Splunk platform offers threat detection capabilities with incident and breach investigation, scoping and resolution. You can automate responses via the Splunk Adaptive Response framework.
This session will highlight interoperability between technologies such as Security Essentials Application, Splunk Enterprise Security (SIEM) and Splunk User Behavior Analytics (a machine learning driven solution) along with showcasing various use cases that can be solved using a behavior centric approach.