COMMUNITY OFFICE HOURS

Security: Insider Threats

Join our Community Office Hours to engage directly with Splunk experts! This is your opportunity to ask questions, gain valuable insights, and receive how-to guidance on Insider Threats. Deepen your understanding of this critical use case and learn how to best leverage Splunk to protect your organization.

What can I ask in this AMA?

• What are the most common insider threats today, and what are the typical indicators associated with them?
• What are the key considerations when detecting and analyzing insider threats?
• What are the best practices for detecting and investigating insider threats using Splunk?
• How can I maximize the use of threat intelligence and contextual insights when investigating insider threats?
• How can I best leverage data from Splunk to understand insider threat trends?
• How can machine learning and AI be used to scale your analytics?
• Can you provide insights on how User and Entity Behavior Analytics (UEBA) helps detect insider threats? How does the risk scoring work?

You can also head to the #office-hours Community Slack channel to ask questions (sign-in with SSO here). Pre-submitted questions will be prioritized.

After that, we will open the floor up to live Q&A with meeting participants.

We look forward to connecting with you!