Configuring Threat Intelligence in Splunk Enterprise Security

سرفصل های دوره

Splunk Enterprise Security is a premium application used within the Splunk deployment to help with SOC operations. This course will teach you how to configure various threat intelligence sources for use within Splunk Enterprise Security.

0. Course Overview

0. Course Overview

1. Exploring Splunk Threat Intelligence

0. Defining Threat Intelligence

1. Learning About Threat Intelligence

2. Common Threat Intelligence Sources and Formats

3. Splunk Enterprise Security Threat Intelligence Feeds

4. Exploring Threat Intelligence Feeds

5. The Threat Intelligence Workflow

2. Understanding Splunk Security Intelligence Tools

0. Learning About Intelligence Tools

1. Exploring Generic Intelligence

2. Configuring Generic Intelligence

3. Additional Generic Intelligence Configuration

4. Analyzing Intelligence Dashboards

5. Using the Intelligence Tools

6. Risk Analysis

3. Detailing the Splunk Threat Intelligence Framework

0. Whats the Threat Intelligence Framework-

1. Understanding the Frameworks Flow

2. Threat Intelligence Integration Points

3. Additional Intelligence Dashboards

4. Deep Diving User Intelligence

5. Wrapping Up User Intelligence

4. Configuring Threat Intelligence Sources

0. Configuring Threat Intelligence in Splunk ES

1. Validating Threat Intelligence Using Lookups

2. Use Case- Brute Force Attack and MITRE Pivot

3. Continuing the Brute Force Attack Use Case

4. Putting It All Together

“PCEP – Certified Entry-Level Python Programmer” به سبد خرید شما اضافه شد. مشاهده سبد خرید

179,000 تومان

افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

تولید کننده: PluralSight