COMMUNITY OFFICE HOURS

Splunk SOAR

Technical Splunk experts answer questions and provide how-to guidance.

Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics.

What can I ask in this AMA?

• What’s new in the latest Splunk SOAR? Should I upgrade to this version, and what’s the easiest way to make the upgrade happen?
• How does the Splunk Attack Analyzer integration work? And how can playbooks be implemented to automate response processes for the malware and phishing attack?
• What are the practical ways to modernize legacy SOC workflows with Splunk Enterprise Security and build the TDIR workflow.
• How to use Wayfinder?
• How to measure the value of my SOAR investment? Real-world examples of how SOAR enhancements improved efficiency, security, and ROI?
• Anything else you'd like to learn!

Please submit your questions at registration. You can also head to the #office-hours Community Slack channel to ask questions (sign-in with SSO here).

Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants.

We look forward to connecting with you!