Open in app
Sign inGet started
Risk-Based Alerting (RBA) with Splunk Enterprise Security

Risk-Based Alerting (RBA) with Splunk Enterprise Security

Alert fatigue and false-positive results are the most common problems in a Security Operation Center (SOC) environment. The correlation…
Go to the profile of Merih Bozbura
Merih Bozbura
Restoring Archived Data with Splunk

Restoring Archived Data with Splunk

Data retention policies help to manage organizations’ big data. Since the amount of data collected today is tremendous, establishing a…
Go to the profile of Merih Bozbura
Merih Bozbura
Syslog Data Collection (SC4S) for Splunk and Custom Inputs

Syslog Data Collection (SC4S) for Splunk and Custom Inputs

As per Splunk Validated Architectures, Splunk Connect for Syslog (SC4S) is the current best practice recommendation to collect syslog data…
Go to the profile of Merih Bozbura
Merih Bozbura
Kafka + S3: Long-term searchable/queryable data retention

Kafka + S3: Long-term searchable/queryable data retention

The goal of this post is to provide an alternate solution for a question we have started to face with our clients. What is the best way to…
Go to the profile of Selim Seynur
Selim Seynur
Splunk Data Models & CIM

Splunk Data Models & CIM

In this post, you will find out what Splunk data models and CIM (Common Information Model) are and why they hold that much importance.
Go to the profile of Merih Bozbura
Merih Bozbura
Detecting Cyber Threats with MITRE ATT&CK App for Splunk — Part 3

Detecting Cyber Threats with MITRE ATT&CK App for Splunk — Part 3

In this part of the blog series I’d like to focus on writing custom correlation rules. The goal is to utilize MITRE ATT&CK App for Splunk…
Go to the profile of Selim Seynur
Selim Seynur
How to Become A Certified Splunk Enterprise Admin?

How to Become A Certified Splunk Enterprise Admin?

In this blog, I will talk about the stages of becoming a certified Splunk admin. Splunk is a data (The Data-to-Everything™) platform that…
Go to the profile of Enes Oğuzhan Alataş
Enes Oğuzhan Alataş
Detecting Cyber Threats with MITRE ATT&CK App for Splunk — Part 2

Detecting Cyber Threats with MITRE ATT&CK App for Splunk — Part 2

In this part of the blog series the goal is to utilize MITRE ATT&CK App for Splunk and associate custom/new correlation searches with…
Go to the profile of Selim Seynur
Selim Seynur
Detecting Cyber Threats with MITRE ATT&CK App for Splunk

Detecting Cyber Threats with MITRE ATT&CK App for Splunk

The purpose of this blog post is to share our experience and knowledge in our attempts to detect cyber threats with ®. Since we have a…
Go to the profile of Selim Seynur
Selim Seynur
About SeynurLatest StoriesArchiveAbout MediumTermsPrivacy