Supplementary Security Advisory for Splunk Apps/Add-ons
This security advisory specifically pertains to Apps/Add-ons (i.e. Extensions) to Splunk Products for CVE 2021-44228 and CVE-2021-45046.
Splunk SOAR Playbooks: TruSTAR Indicator Enrichment
Learn about the TruSTAR Indicator Enrichment playbook, providing a strong foundation for utilizing threat intelligence in SOAR.
Enabling the Self Driving Cloud with Splunk Observability Cloud and GKE Autopilot
Announcing Splunk's Observability Cloud and OpenTelemetry upcoming support for GKE Autopilot
Log4Shell - Detecting Log4j Vulnerability (CVE-2021-44228) Continued
Good news, you can use Splunk to proactively hunt using Network Traffic and DNS query logs data sources to detect potential Log4Shell exploit. From Splunk SURGe, learn even more detections against CVE-2021-44228.
Splunk Cloud Self-Service: Announcing The New Admin Config Service API For Private Applications
Learn more about how customers can leverage the new ACS private app management to gain more value from their Splunk deployment.
Splunk Security Advisory for Apache Log4j (CVE-2021-44228, CVE-2021-45046 and others)
Splunk is currently reviewing our supported products for impact and evaluating options for remediation and/or or mitigation.Please return to this posting for the most up to date information.
Active Directory Lateral Movement Detection: Threat Research Release, November 2021
The Splunk Threat Research Team recently updated the Active Directory Lateral Movement analytic story to help security operations center (SOC) analysts detect adversaries executing these techniques within Windows Active Directory (AD) environments.
Log4Shell - Detecting Log4j 2 RCE Using Splunk
A serious remote code execution (RCE) vulnerability (CVE-2021-44228) in the popular open source Apache Log4j logging library poses a threat to thousands of applications and third-party services that leverage this library. From Splunk SURGe, learn how you can detect Log4j 2 RCE using Splunk.
High Five: The Latest Integrations from Splunk, Microsoft and GitHub
Get the latest on new integrations from Splunk, Microsoft and GitHub in this roundup on the latest updates.
