Americas' BOTS Day '22

By Tom Smit

We’ve been working and preparing for Americas’ BOTS Day ‘22, which will be held on September 27th, 2022. With less than a month to go before the big day, we thought it would be the perfect time to explain what’s happening and how the day will go. Of course, if you are here for the goods and know what a BOTS day entails, you can enroll here.

After our global debut of Boss of the SOC (BOTS) v7 in June at Splunk .conf22, we’ve spent the last few months tweaking and tuning to get ready to bring BOTS 7 to the world. And to quote BOTSFather Ryan Kovar: “It’s free to play! Free, Free, Free! Free like beer! Not like puppies!”

What’s new in BOTS 7? I’m glad you asked. You’ll again play the part of Alice Bluebird, our quirky Splunk Security analyst who has had a rough go since joining Frothly Home Brewery six years ago. On the heels of last summer’s attack, Alice decided to take some much deserved vacation and enjoy time on a nice tropical island. Besides, Violent Memmes only attacks in August – why would they ever change?

With Alice enjoying an umbrella drink on a beach somewhere, Grace moved ahead with the acquisition of Toads Pest Controls. During conversations, Toads decided to decommission several tools and integrate their Splunk instance with Frothly’s to collect all of their data in one location. Meanwhile, Violent Memmes decides to attack Toads Pest Control during their Splunk Infrastructure Migration.

Details

So what are the details? This BOTS event is set to kick off on Tuesday, September 27th at 9AM Pacific/12PM Eastern. Registration is currently open and we’re accepting teams of 1-4 players at the Splunk BOTS website. If you're looking for a team, the best place to go is over to our Slack server or reach out to your network on Twitter. It's critical that each player on your team registers.

More Information

Looking for more tips on Boss of the SOC? Don’t forget our handy dandy blog series, "Hunting with Splunk: The Basics,” which was inspired by the questions customers have asked at BOTS events all over the world! Also be sure to check out the other on-demand tools on the BOTS portal.

Good luck, and may the odds be ever in your favor!

Tom Smit

Tom Smit is a Principal Security Strategist at Splunk and has been a Splunker for eight years. He is active at Splunk as a voice for security, is a strong advocate of security workshops, sharing his experience, and bringing Splunk and security together for customers. During his time at Splunk he has been involved with content creation of Boss of the SOC v3, v4, v5, and head the v6 and v7 programs. Before joining Splunk, Tom held sales engineering, professional services, and product roles at Symantec, Mimecast, Raytheon, and Core Security.

Security 3 Min Read

3 Important German BSI Documents Every SIEM & SOC Manager Needs To Know About

The German IT Security Act 2.0 (IT-SiG 2.0) has been in force for some time now. Due to this new law, significantly more German companies have been classified as operators of critial infrastructures (KRITIS) than ever. This is a major cause of headaches for many managers. In addition, IT departments are starting to ask themselves: "Are we now regarded as KRITIS"? And if so, "What do we have to take into consideration?" Splunker Matthias Maier shares the 3 most important BSI documents every SIEM and SOC manager needs to know about.

Security 1 Min Read

Detecting Malware and Watering Hole Attacks with Splunk UBA

Watering hole attacks involve a web server that hosts files or applications where the website or files on the site become weaponized with malware. Learn how you can detect and prevent these attacks with Splunk UBA.

Security 3 Min Read

What's New with Splunk Enterprise Security 6.6?

Learn about the latest and greatest features of Splunk Enterprise Security 6.6.

About Splunk

The Splunk platform removes the barriers between data and action, empowering observability, IT and security teams to ensure their organizations are secure, resilient and innovative.

Founded in 2003, Splunk is a global company — with over 7,500 employees, Splunkers have received over 1,020 patents to date and availability in 21 regions around the world — and offers an open, extensible data platform that supports shared data across any environment so that all teams in an organization can get end-to-end visibility, with context, for every interaction and business process. Build a strong data foundation with Splunk.

Learn more about Splunk

Americas' BOTS Day '22

Details

More Information

Related Articles

3 Important German BSI Documents Every SIEM & SOC Manager Needs To Know About

Detecting Malware and Watering Hole Attacks with Splunk UBA

What's New with Splunk Enterprise Security 6.6?

About Splunk

Subscribe to our blog

Connect with Splunk on X

Connect with Splunk on Instagram