Master Incident Investigation with Splunk: A Hands-On Workshop

Join us for a dynamic, hands-on session designed to enhance your skills in investigating incidents with Splunk. This workshop offers you the chance to gain practical experience using Splunk to solve real-world security investigation scenarios. Leveraging the renowned Boss of the SOC (BOTS) dataset, this interactive format simulates the questions you might face in your own organization, guiding you through Splunk’s powerful search capabilities. By the end of this session, you'll have a stronger grasp on using Splunk for enterprise investigations and be equipped with actionable knowledge to improve incident response.

During this virtual workshop, participants will learn:

• How to effectively use Splunk's search capabilities to investigate security incidents
• Strategies to answer investigation-related questions based on real-world scenarios
• Best practices for applying Splunk investigation techniques