COMMUNITY OFFICE HOURS

Security: Threat Investigation and Analysis

Technical Splunk experts answer questions and provide how-to guidance

Community Office Hours is an ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics.

This is your opportunity to ask questions related to your specific Splunk threat investigation, analysis needs and use cases, including:

• What are the best practices for enhancing threat investigation and analysis? How can I help my SOC save time on those missions?
• How do I maximize the use of threat intelligence and contextual insights when investigating active threats?
• Which Splunk tools should I leverage to help optimize and automate the process of analyzing and investigating threats?
• How can Splunk help me get through phishing investigations more efficiently?
• How does Splunk Attack Analyzer complement SOAR tools and capabilities? How is it integrated with other Splunk security solutions?
• Anything else you’d like to learn!

We look forward to seeing you there!

Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here).

Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants.

Registration Closed