Near Real Time Phishing Detection at The Dutch Tax Office with Splunk

As a high profile public sector organisation, the Dutch Tax Office face phishing attacks each day with criminals claiming to be representatives of the organization, contacting the public with phishing emails.

In a joint presentation, Karl and Arnold explain how the team are indexing 1.5TB of data a day in Splunk and how they detect phishing attacks as quickly as possible, gaining visibility with Splunk on who is trying to send emails on behalf of the Tax Office.

Watch the on-demand session from SplunkLive! Utrecht to see real world phishing attacks, and how the Tax Office monitor mail server logs to stop attacks before they impact the general public.