You've probably heard examples of Splunk Phantom automating 90% of Tier 1 processes, but did you know that Phantom improves human-lead processes too? Come learn about the hidden value of validation and utility playbooks from Penn State University’s Enterprise Security Manager and Splunk’s Lead Technologist for Higher Education. Validation playbooks are automated tests run to validate a human judgement or request. Utility playbooks are short easy-to-create playbooks in Phantom that an analyst  runs during an investigation.  We’ll cover when to use validation and utility playbooks, how to get started creating them, and ideas for other playbooks you can use to improve your daily operations.

Speaker(s)
Craig Vincent, Lead Technologist,SLED, Splunk
Chris Decker, Enterprise Security Manager, Penn State University

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC2205.pdf?podcast=1576909570