false
Tom Smit

Tom Smit

Tom Smit is a Principal Security Strategist at Splunk and has been a Splunker for eight years. He is active at Splunk as a voice for security, is a strong advocate of security workshops, sharing his experience, and bringing Splunk and security together for customers. During his time at Splunk he has been involved with content creation of Boss of the SOC v3, v4, v5, and head the v6 and v7 programs. Before joining Splunk, Tom held sales engineering, professional services, and product roles at Symantec, Mimecast, Raytheon, and Core Security.

セキュリティ 17 分程度

Windowsログから見えてくること:Sysmonとイベントコードを活用した脅威ハンティング

Windowsとエンドポイントは、Splunkと脅威ハンティングのように切っても切れない関係にあります。Splunkで脅威ハンティングを行うときに特に役立つSysmonイベントコードをご紹介します。