ON-DEMAND

Sip & SOAR to Threat Hunting

Panel Discussion + Whiskey Tasting

Threat hunting has become standard practice in organizations to proactively find bad actors operating within the organization. Previously, reliance was placed solely on the SIEM to detect these issues, but it became clear that a passive approach will not suffice with persistent adversaries. Organizations of all sizes are now performing threat hunting to catch behavior that is difficult to detect automatically and decrease the dwell time of the adversary.

Threat hunting is a loaded term for purists who consider this any manual searching within the environment for adversaries beyond SIEM alerts. For others, threat hunting helps identify gaps in their coverage to justify onboarding additional data sources. Finally, less sophisticated or novice hunters may take new threat intelligence indicators and search against their existing datasets for previous interactions. All of these are valid within Splunk, but the terminology means different things to different organizations.

Come for the discussion, stay for the Whiskey Cocktails! Following the panel, we’ll host an interactive whiskey tasting session.

Our Speakers