Splunk Enterprise Security: Big Picture

Splunk has a security tool for SOC operations and incident detection. Learn how Splunk Enterprise Security can help transform your SOC into an efficient, more effective one through streamlined investigations, correlation searches, and intelligence.
Course info
Level
Beginner
Updated
Mar 31, 2020
Duration
51m
Table of contents
Description
Course info
Level
Beginner
Updated
Mar 31, 2020
Duration
51m
Description

Splunk Enterprise Security (ES) solves many problems that we face inside SOC environments today. It helps to streamline investigations, perform automated correlation, and give intelligence to your team in a useful interface. In this course, Splunk Enterprise Security: Big Picture, you will develop an understanding of how Splunk Enterprise Security fits into your organization and assists your cyber security team. First, you will learn what Splunk Enterprise Security is and does. Next, you will discover how the useful features that Splunk ES provides will help transform your operations. Finally, you will explore the many use cases of Splunk ES and how it would be used in your environment. When you are finished with this course, you will have the skills and knowledge of Splunk ES needed to fully understand its capabilities and features.

About the author
About the author

Joe is a Network Consulting Engineer and has worked in the IT industry since 2010. He has experience in teaching and mentoring IT professionals in both DoD environments and in the civilian sector, in both the networking and IT security fields.

More from the author
Cisco CyberOps: Exploring Security Concepts
Intermediate
1h 37m
May 29, 2020
More courses by Joe Abraham
Section Introduction Transcripts
Section Introduction Transcripts

Course Overview
[Autogenerated] Hi, everyone. My name is Joe Abraham and welcome to my course Splunk Enterprise Security. Big picture. I'm currently in network security consultant and a plural, say author with courses in the I T operations and security domains. Are you trying to get your sock the tools that it needs to properly correlate events and investigate attacks? Do you want to learn more about Splunk enterprise security and how it can help you out? Well, in this course, we're going to get that done. I'll help you learn all about Splunk in a price security and how you can use it in various ways to better your security posture, increase your efficiency and investigate properly. Some of the major topics that will cover include learning Splunk enterprise security components, saying use cases for the tool and understanding the features and benefits of it. By the end of this course, you'll know all about the application and what it can do for you, and you'll be able to identify use cases within your own environment and features that could benefit you from the tool. Before beginning this course, you should be familiar with basic I t terminology and have a desire to learn more about this security tool. Knowledge of machine data would help out as well. From here, you should feel comfortable diving further into the Splunk Enterprise security tool and start navigating through a deployment with us. As we continue down this and other Splunk learning passive plural site, I hope you'll join me on this journey to learn more about Splunk in a price security with the Splunk Enterprise Security Big picture course at plural site.