In January, as part of its continuing efforts to acquire and secure advanced technology for cyberdefense, data analytics, and other mission critical operations, the Department of Defense (DoD) designated the Splunk Enterprise Software Initiative (ESI) Blanket Purchase Agreement (BPA) as a Core Enterprise Technology Agreement (CETA). This agreement allows DoD agencies to more easily access Splunk's most advanced technologies with pre-negotiated...

APT hunting with Splunk is a modular, hands-on workshop designed to provide a deeper dive into an Advanced Persistent Threat while providing an opportunity for participants to develop hypotheses and hunt. This workshop leverages Splunk and Enterprise Security and introduces how models like the Lockheed Martin Kill Chain, MITRE ATT&CK and Diamond Model can be used to contextualise their hunts. The workshop leverages the popular Boss of the...

CMMC is the new measure of cybersecurity maturity for all contractors participating in the Department of Defense (DoD) procurement processes - meaning there is a lot at stake.While mandatory CMMC compliance is top-of-mind across all DoD government contractors, the wrong approach can be costly and result in excruciating audits and a failing grade on audits. Innovators are leveraging their data in new ways and finding that compliance automation...

Join your Splunk account team for our bi-monthly virtual user group event!Topics will change between each user group depending on recent events, new capabilities, or other feedback we receive from you. Whether you're a seasoned Splunker or a total n00b, join us every other month to go over: A live Q&A with your Splunk account teamPresentations from Splunk experts on new technical capabilitiesRelevant use cases and best practicesKnowledge-s...

Ensuring mission success to sustain the quality of the All-Volunteer Force through state-of-the-art enlistment screening for applicants seeking to serve in our Nation's Armed Forces requires USMEPCOM to rely on a complex network of heterogeneous devices, systems, and applications.Splunk has the ability to ingest unstructured data from any operational environment to offer detailed insights, correlations, and analysis in real-time. Maximizing av...

This workshop provides a focused, hands-on experience using Splunk ITSI’s various workflows for troubleshooting IT problems. In this workshop you will learn about the basic AIOps features provided by ITSI and SAI: Service Monitoring, technical and business Multiple ways to visualize service health and correlate KPIs Various ML features Integration points to Splunk Enterprise, other Splunk products The Splunk ITSI for Ninjas largely build...

Distributed ledger technologies are beginning to increase security, efficiency, and even enable new operating models.Join us for a session where we will give a quick primer on what this technology enables that wasn't previously possible, the challenges organizations are running into, and provide live demonstrations on how organizations are resolving these challenges. Permissioned (Hyperledger Fabric) and permissionless (Ethereum) use cases wil...

Attend our Splunk webinar where you'll learn about how Splunk is a central platform where all data can be indexed and compiled into a readable language, solutions, use cases, and security. Join us for a session where we will give a brief introduction to a SIEM tool and what it stands for, how a SIEM can be used for determining analytics, and the importance of having an overview of your infrastructure. Participants will learn about setting aler...

Join Splunk and WWT for a webinar where you'll learn about the current threat that phishing attacks pose to our federal, state and local, and educational organizations, and how to defend against them with Splunk Phantom. During this webinar and live demo, attendees will gain insight into: Today's phishing threat landscape How to defend against phishing with Splunk Phantom and WWT How to quickly triage, investigate, and respond to phishing atte...

The value Splunk has always delivered for IT operations customers is the ability to correlate information from any type of infrastructure and/or application, and their associated monitoring solutions (e.g., BMC Footprint, Nagios, SolarWinds, CISCO X, Y, or Z) all in one location.The key to differentiating this value isn't in the alert itself but in the resulting workflow. Once an alert or workflow management ticket is received, system, infrast...