Advanced Threat Hunting and Anomaly Detection with Splunk UBA

preview_player
Показать описание
Splunk User Behavior Analytics (UBA) contains the largest library of unsupervised machine learning in the market. In this session, we'll show how to analyze data from both cloud and on-premises data sources in both types of deployment (cloud/on-premises) to convey the unique benefits of Splunk UBA. We'll discuss real-world examples that showcase the importance of using UBA and all other tools at your disposal for day-to-day threat hunting. Specifically, we'll show how to use Splunk Enterprise, Splunk Enterprise Security, and Splunk UBA together to hunt and detect anomalies that can reveal significant threats. We'll wrap up with best and worst practices from deployments seen throughout the world.

From .conf19, session SEC1248

Special thanks and credit to Tom Smit, Staff Sales Engineer, Splunk
  1. Can You SPL
  2. Splunk
  3. .conf19
Рекомендации по теме
Advanced Threat Hunting 0:46:16

Advanced Threat Hunting and Anomaly Detection with Splunk UBA

How To Threat 0:06:01

How To Threat hunt Like A Pro: The Easy Way

Cybersecurity Threat Hunting 0:06:51

Cybersecurity Threat Hunting Explained

Data Anomaly Driven 0:27:11

Data Anomaly Driven Web Threat Hunting

Azure ATP Demo: 0:22:34

Azure ATP Demo: Identity Threat Hunting

Threat Hunting for 0:35:18

Threat Hunting for VPN Anomalies

Getting started with 0:13:22

Getting started with Threat Hunting in Microsoft Sentinel

Advanced Threat Detection 0:02:34

Advanced Threat Detection with UEBA & Anomaly Detection Based on MITRE ATT&CK Framework in W...

Advanced threat detection 0:07:51

Advanced threat detection with Cisco Stealthwatch - using anomaly detection

Common misconceptions and 0:31:22

Common misconceptions and mistakes made in Threat Hunting

Leveraging User Behavior 0:38:01

Leveraging User Behavior for Cyber Threat Hunting

Keynote: Threat Hunting: 0:43:34

Keynote: Threat Hunting: Old Data, New Tricks!

Managed Detection and 0:02:59

Managed Detection and Response: Threat Hunting

Threat Hunting with 0:18:30

Threat Hunting with Network Flow - SANS Threat Hunting Summit 2017

Cisco Security HOWTO: 0:07:30

Cisco Security HOWTO: Threat Hunting

At Scale Anomaly 1:06:57

At Scale Anomaly Detection for Enterprise Security: Joshua Neil, Microsoft

Threat Hunting via 0:51:01

Threat Hunting via Sysmon - SANS Blue Team Summit

My “Aha!” Moment 0:33:41

My “Aha!” Moment - Methods, Tips, & Lessons Learned in Threat Hunting - SANS THIR Summit 2019...

which side are 0:00:07

which side are you on? 🇮🇱/🇵🇸 #israel #freepalestine #idf #shortsvideo

Threat Hunting on 0:39:06

Threat Hunting on the Cheap: Threat Hunting Summit 2016

Wireshark and Recognizing 0:06:07

Wireshark and Recognizing Exploits, HakTip 138

Practical Threat Hunting 0:30:21

Practical Threat Hunting With Machine Learning

Microsoft 365 Defender 0:56:34

Microsoft 365 Defender webinar: Advanced hunting in Microsoft 365 Defender

Building a Hunting 0:22:35

Building a Hunting Program at a Global Scale | 2020 Threat Hunting & Incident Response Summit

Комментарии
Автор

Where would the free online training be?

nilacurry
Автор

FYI - You can execute from C:\Windows\System32

karan_nayak