Splunk Enterprise Security APP Bootcamp- Part 1

Course details

This course prepares security practitioners to use Splunk Enterprise Security (ES). Students will use ES to identify and track security incidents, analyze security risks, use predictive analytics, and threat discovery.

Course Topics

• ES concepts
• Security monitoring and Incident investigation
• Assets and identities
• Detecting known types of threats
• Monitoring for new types of threats
• Using analytical tools
• Analyze user behavior for insider threats
• Use risk analysis and threat intelligence tools
• Use protocol intelligence and live stream data
• Use investigation timelines and journal tools
• Build glass tables to display security status