Splunk Security (@SplunkSec) profile picture

Splunk Security Practice

Joined September 2013
Photo by Splunk Security (@SplunkSec)Photo by Splunk Security (@SplunkSec)
𝘩𝘦𝘺, 𝘪𝘴 𝘵𝘩𝘪𝘴 𝘵𝘩𝘪𝘯𝘨 𝘰𝘯? Been awhile! One of the new peeps (@matthewvalites ) on our team is an organizer of this. Check it out.
This quoted post is unavailable.
1
4
Are you coming to #Splunkconf16 this year? Sign up for the Boss of the SOC and see if you have what it takes! live.splunk.com/BossoftheSOC
1
7
8
Replying to @rj_chap
@rj_chap @divious_1 @splunk It sure is! Check out the slides and a recording of here conf.splunk.com/speakers/201…
1
Splunk Security retweeted
We're now getting an overview of #SplunkSecurity from @monzymerza here at #Splunkconf
1
26
27
Splunk Security retweeted
Replying to @monzymerza
@monzymerza announces Splunk Enterprise Security 4.0 and Splunk UBA! #splunkconf @splunk @Splunkconf @SplunkSec
2
2
Splunk Security retweeted
Don't put your corporate laptop on @wallofsheep network.... @SplunkSec is watching
Splunk Security retweeted
Detecting dynamic DNS domains in #Splunk by @meansec blogs.splunk.com/2015/08/04/… #Bro_IDS
5
7
Splunk Security retweeted
that's 'cause Lyle is using @splunk for Operational Intelligence at the NOC at #BHUSA teapawt.org/gr3yr0n1n/status/62873…
3
1
You should stop by the @BlackHatEvents #NOC to see #Splunk in action - especially if you are still using POP3 in 2015 #Blackhat #Whoops
Google Safe Browsing App for #Splunk, leverage #Google blacklists directly & locally splunkbase.splunk.com/app/27… #malware #security poke @Google
7
2
Replying to @circl_lu
@circl_lu what capability do you want? SA-SPLICE or Enterprise Security App allows to ingest OpenIOC/STIX/TAXII already.
1
What about querying Passive SSL (X.509 certs) service from #CIRCL directly from #Splunk? splunkbase.splunk.com/app/27… (cc @circl_lu)
1
6
2
So, you want to parse #URL like a Pro? Or just run a Bayesian analysis on bigrams distribution? splunkbase.splunk.com/app/27… #LookInYourProxyLogs
3
2
We're rocking/rolling in San Antonio for #NCCDC . Students are using Splunk and we're visualizing the attacks #l33t
3
3
Accelerate the Detection of Advanced Threats and Malicious Insiders #RSAC2015 blogs.splunk.com/2015/04/21/…
1
1
Replying to @vidkun
@vidkun you can try hailataxii.com they use Soltra Edge in the backend. If you have others, let us know!