Splunk For SOC Analysts (New Course) [2023]

سرفصل های دوره

Splunk For SOC Analysts, Threat Hunters & SOC Leads

01 - About the course

001 About the course

02 - About Splunk

001 About Splunk

002 Splunk Enterprise as a SIEM

003 Splunk segments of data pipeline

004 Splunk Components

005 Splunk Components mapping with Data pipeline segments

006 Splunk Sample Architecture

007 Conclusion Of Various Splunk Architecture Discussion

03 - Splunk Enterprise Security App Overview

001 Splunk Enterprise Security App - premium App

04 - Splunk Home Lab Setup - Windows Based On Azure

001 How to create an account in azure

002 How to apply for Splunk Enterprise Developer License.html

003 Creation of Windows VM on Azure using free Azure Credit

004 Splunk Enterprise Installation On Windows Machine

005 Splunk Developer license upload and other configuration - Windows Instance

external-links.txt

05 - Splunk home lab setup - Linux Based on VM Ware

001 Splunk Installation on Linux Machine (Centos)

002 Splunk Developer License Upload & Other Configurations - Linux instance

06 - Splunk default ports

001 Splunk default ports

07 - Splunk directory structure

001 Splunk directory structure

08 - Splunk Configuration (.conf) files

001 Splunk Configuration (.conf) files

external-links.txt

09 - Splunk App

001 Splunk App

external-links.txt

10 - Lab 2 Simulation of Event Generation

001 SA-Eventgen App installtion and index creation in Splunk - Windows

002 SA- Eventgen App installation on Splunk (Linux)

external-links.txt

11 - Splunk GUI Overview

001 Splunk GUI Overview

002 Available options of time ranges and abbreviations in searches

12 - Splunk Search Timeline Controls

001 Splunk Search Timeline Controls

002 Available options of time ranges and abbreviations in search bar

13 - Search Language Syntax concepts

001 Search Language Syntax concepts

14 - Case Sensitivity During Splunk Search

001 Case Sensitivity During Splunk Search

15 - Lab 3 How to upload and investigate logs in Splunk

001 Investigation file - iis logs upload

001 exchange-2016-iis.zip

002 How to upload csv (or any other structured) file in Splunk

002 nutrients.csv

16 - Lab 4 Monitor your own OS logs

001 Monitoring of own machines OS logs

17 - Splunk App In Detail With An Example From Splunk Base

001 Splunk App In Detail With An Example Of Paloalto Addon Installation

external-links.txt

18 - Splunk Configuration In Detail With An Example

001 Splunk Configuration In Detail With An Example

19 - Lab 5 Manual parsing of logs

001 Manual parsing of logs.html

external-links.txt

20 - Lab 6 How to monitor file path Example of csv file extraction

001 How to monitor file path and example of CSV file extraction.html

001 vmware-inventory.csv

external-links.txt

21 - Splunk Role Based Access

001 Splunk role based access

22 - lookup, lookup definition, automatic lookup

001 apache-httpstatus.csv

001 lookup, lookup definition, automatic lookup.html

external-links.txt

23 - Splunk Important Commands

001 commands intro

002 table commands

003 fields command

004 head command

005 tail command

006 top & rare command

007 stats command

008 timechart command

009 chart command

010 eventstats command

011 dedup command

012 sort & rename command

013 iconify command

014 highlight command

24 - Lookup Editor App Installation

001 Lookup Editor App Installation

25 - Some more search commands

001 inputlookup , outpulookup , lookup, append, rex, fillnull, transpose command

26 - Splunk KV Store (Key Value Store)

001 Splunk KV Store

27 - Installation of Splunk Add-on for Microsoft Windows

001 Installation of Splunk Add-on for Microsoft Windows

28 - Some More Splunk Search Commands

001 eval command

002 where command and Boolean operator precedence

003 multivalue functions eval command mvexpand command

29 - Types of Search Commands

001 Types of search commands and processing attributes

30 - Splunk data life cycle stages in term of buckets

001 Splunk data life cycle stages in term of buckets

31 - General Search Practices

001 General Search Practices

32 - App Creation from GUI

001 App Creation from GUI

33 - Field extractions

001 Field extractions

34 - Report & Alerts

001 Report & Alerts

35 - Some more Splunk search commands

001 iplocation and geostats command

36 - Splunk Dashboard Creation

001 Dashboard

37 - Splunk Dashboard Optimization Using Base Search

001 Dashboard Optimization

38 - Splunk Macros

001 Splunk Macros

39 - Splunk Eventtypes

001 Splunk Eventtypes

40 - Resources For Splunk Alert Use-cases & Threat Hunting Hypothesis Creation

001 research.splunk.com

external-links.txt

41 - Splunk Enterprise Security

001 Splunk Enterprise Security Part 1

002 Splunk Enterprise Security Part2

42 - Cheatsheets For Splunk Commands & Terms

001 Commands and some online resources to explore further on your own.html

001 Splunk-Commands.pdf

001 splunk-quick-reference-guide.pdf

43 - Interview Questions-Answers For SOC Analyst

001 Interview Questions-Answers For SOC Analyst.html

44 - Some Sample SPL to detect various threats (Usecases)

001 SOC-SIEM-Usecases.pdf

001 Sample Splunk queries to be used as a reference.html

001 Some-SPL-examples-to-detect-threat.pdf

45,900 تومان

خرید اشتراک افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

تولید کننده: Udemy