Tuning and Creating Correlation Searches in Splunk Enterprise Security

سرفصل های دوره

Learn to plan, design, develop, tune, and deploy correlation searches in Splunk Enterprise Security v6. Understand and manage ES-specific lookups as well as setting up the Asset and Identity framework for data enrichment and helping investigations.

0. Course Overview

0. Course Overview

1. The Anatomy and Functions of Correlation Searches

0. Overview

1. Setting up the Demo Environment

2. What Are Correlation Searches-

3. Components and Functions of Correlation Searches

4. Demo- Exploring, Enabling and Running Correlation Searches

5. Summary

2. Tuning Correlation Searches

0. Overview

1. Correlation Search Life-cycle

2. Components of a Correlation Search

3. Demo- Components of a Correlation Search

4. Demo- Dissecting Risk Analysis and Notable Response Actions

5. Demo- Cloning a Correlation Search and Adding Incident Review Attributes

6. Understanding Thresholds in Correlation Searches

7. Demo- Understanding Thresholds in Correlation Searches

8. Summary

3. Creating Correlation Searches

0. Overview

1. Defining Use-case and Planning the Correlation Search

2. Demo- (Part 1) Designing, Developing, Testing and Deploying a Correlation Search

3. Demo- (Part 2) Designing, Developing, Testing and Deploying a Correlation Search

4. Adaptive Response Actions Overview

5. Summary

4. Importing and Exporting Correlation Searches

0. Overview

1. Exporting Correlation Search in Splunk ES

2. Demo- Exporting and Importing a Correlation Search

3. Summary

5. Implementing ES-specific Lookups and Managing Identities

0. Overview

1. Splunk ES-specific Lookups

2. Demo- Splunk ES-specific Lookups

3. Demo- Creating Search-driven Lookups in Splunk Enterprise Security

4. Introduction to Splunk ES Asset and Identity Framework

5. Demo- Adding Static Lookups to Asset and Identity Framework

6. Demo- Adding Dynamic Lookups to Asset and Identity Framework

7. Demo- Asset and Identity Investigator Dashboards

8. Summary

6. Summary

0. Wrap-up Summary

54,900 تومان

خرید اشتراک افزودن به سبد خرید

خرید دانلودی فوری

در این روش نیاز به افزودن محصول به سبد خرید و تکمیل اطلاعات نیست و شما پس از وارد کردن ایمیل خود و طی کردن مراحل پرداخت لینک های دریافت محصولات را در ایمیل خود دریافت خواهید کرد.

تولید کننده: PluralSight