Splunk for Incident Response: Practical Investigation Scenarios

Master Splunk for incident response: investigate, analyze, and mitigate security threats with practical scenarios and advanced techniques.

...

Splunk Fundamentals for Incident Responders

Unit 1: Introduction to Splunk for Security

Unit 2: Search Processing Language (SPL) Fundamentals

Unit 3: Basic Reporting and Visualization

Investigating Common Security Incidents with Splunk

Unit 1: Malware Infection Investigations

Unit 2: Phishing Attack Investigations

Unit 3: Brute-Force Attack Investigations

Advanced Splunk Techniques for Incident Response

Unit 1: Threat Intelligence Integration

Unit 2: MITRE ATT&CK Framework

Unit 3: Automating Incident Response

Leveraging Splunk Enterprise Security (ES) and Machine Learning

Unit 1: Introduction to Splunk Enterprise Security (ES)

Unit 2: Incident Investigation with Splunk ES

Unit 3: Machine Learning for Security in Splunk

Unit 4: Advanced Splunk ES Customization