Security Blogs
Security
3 Min Read
Announcing the availability of Cisco Talos Incident Response services to Splunk customers.
Latest Articles
Three Reasons It’s Time to Re-Evaluate Your Approach to Security Operations
Enterprise Strategy Group (ESG) identifies three major drivers fueling the need for a new approach to building/maintaining Security Operations Centers (SOCs)
Staff Picks for Splunk Security Reading May 2019
A selection of presentations, white papers and blog posts you might have missed in this month (or before), handpicked from the Splunk security world
North American BOTS Day 2019
Everything you need to know about North American BOTS Day 2019
Using Security Essentials 2.4: Analytics Advisor
Here are the benefits of using this awesome new feature
Staff Picks for Splunk Security Reading April 2019
A selection of presentations, white papers and blog posts you might have missed in this month (or before), handpicked from the Splunk security world
Threat Intel and Splunk Enterprise Security Part 2 - Adding Local Intel to Enterprise Security
Splunker John Stoner shares a walkthrough for how to add local threat intelligence into Splunk Enterprise Security
Service Providers Need More Than a SIEM
If you're a security-focused service provider, we've got good news for you – Splunk is more than just a SIEM solution.
Introducing Analytics Advisor to Splunk Security Essentials
Splunk Security Essentials (SSE) version 2.4 is now available!
Boss of the SOC 2.0 Dataset, Questions and Answers Open-Sourced and Ready for Download
You asked, we delivered – Boss of the SOC 2.0 has been open sourced, including dataset, questions, answers and even a scoring server update!
Threat Intel and Splunk Enterprise Security Part 1 - What’s The Point of Threat Intel in ES?
Find out how threat intelligence works with Splunk Enterprise Security
Splunk Your Phantom Events
Introducing the Splunk App for Phantom Reporting, available now in Splunkbase
Cloud Services Have Broken Your Defenses – Here's How to Fix Them
Don't fall for common misconceptions about cloud services. Learn how to protect your cloud infrastructure by shoring up some common holes.
Using CircleCI and Splunk AppInspect
Learn how to use CircleCI and Splunk AppInspect to validate your Splunk app (before you upload it to Splunkbase!).
Staff Picks for Splunk Security Reading March 2019
A selection of presentations, white papers and blog posts you might have missed in this month (or before), handpicked from the Splunk security world
Is Your Security Practice Aligned With Business Outcomes?
How businesses can better align security with business outcomes and prove value.
SIEM: The Steps Before "The First Steps"
Laying the groundwork before taking those first crucial steps towards the best SIEM for your business
CVE-2019-6340: Going Full Circle
Learn how to detect and investigate signs of a dangerous Drupal exploit detailed in CVE-2018-6340.
Wire Data, Huh! What Is It Good For? Absolutely Everything, Say It Again Now!
A brief overview of wire data, its uses and sources, and the new Splunk Essentials for Wire Data app
Subscribe to our blog
Get the latest articles from Splunk straight to your inbox.
Connect with Splunk on X
Follow @Splunk
