Managing Splunk Enterprise Security Data and Dashboards

سرفصل های دوره

Splunk Enterprise Security is a premium application used within the Splunk deployment to help with SOC operations. This course will teach you how to manage your data, and manage the dashboards and feature using the data.

0. Course Overview

0. Course Overview

1. Configuring Data Inputs for Splunk Enterprise Security

0. Introduction

1. Course Information

2. CIM Compatibility

3. Data Models Demo

4. Exploring More Data Model Information

5. Endpoint Data

6. Endpoint Data Demo

7. Authentication Data

8. Closing It Out!

2. Examining Security Posture and Metrics

0. Introducing the Security Posture Dashboard

1. What Are Key Indicators-

2. Creating Key Indicators

3. Exploring the Security Posture Dashboard

4. Glass Tables

5. Creating Glass Tables for Metrics

6. Wrapping up Security Posture

3. Managing the Incident Review Dashboard

0. Introducing the Incident Review Dashboard

1. Whats a Notable Event-

2. Creating a Notable Event

3. The Incident Review Dashboard

4. Understanding the Incident Review Dashboard Information

5. Working with the Incident Review Dashboard

6. Module Summary

4. Exploring Additional Dashboards and Features

0. Additional Splunk Dashboards

1. The Audit Dashboards

2. Audit Dashboard Demo

3. Security Domains

4. Security Domains Demo

5. Dashboard Permissions and Configurations

6. Configuring Dashboards Demo

7. Closing Out Dashboards

5. Managing Investigations in Splunk Enterprise Security

0. Introducing Investigations in Splunk ES

1. Working with Investigations

2. Investigation Workflow Demo

3. Managing the Investigations Dashboard

4. Managing and Configuring Investigation Objects

5. Lets Wrap!

139,000 تومان

خرید اشتراک افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

تولید کننده: PluralSight