Transform your SOC into a Cyber Fusion Center. Learn how to address alert fatigue and cut down on missed alerts by implementing AI technology in your SOC.

Speaker(s)
Lesly White, Sr. Director, Cyber Operations SIEM and Sensor, Optiv

Slides PDF link - https://conf.splunk.com/files/2019/slides/ITS2583.pdf?podcast=1577146225

Product: Splunk Cloud, Splunk Enterprise Security

Track: IT Operations

Level: Good for all skill levels

You think data ingestion into Splunk is cumbersome today? Don’t enjoy writing Technology Add-ons (TA) for specific use cases? Then this talk is for you!  We will walk through data ingestion using the data sources supported by the new Splunk Investigate wizard. This allows users of all levels to configure their data source and perform various manipulation functions on the ingested data to make sure it meets their use case. We will also go over the guiding principles of the underlying Data Stream Processing (DSP) pipeline which empowers the user to add their own customizations and send data to a variety of destinations.   We will compare this with current Splunk Enterprise data ingestion process by configuring a TA for a specific use case and then alter the ingested data to the desired format before sending it to an index. The user will be able to draw a contrast between the two approaches and see how it does not have to take up to 6 weeks to acquire and prepare data for analytics in Splunk. We hope this session leaves the user excited about data ingestion and prep.   

Speaker(s)
Asmita Puri, Sr. Software Engineer, Splunk
Eric Sammer, Distinguished Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/DEV1140.pdf?podcast=1577146225

Product: Splunk Enterprise, Splunk Developer Cloud

Track: Developer

Level: Intermediate

The mega event Expo brings together ideas, innovations, and inventions is will open its doors in the UAE on 20 October 2020 for a period of six months. This celebration of human ingenuity offers a glimpse into the future and is anticipated to attract 25 million visits, 70 percent of those visitors from 190 countries. The Expo 2020 Dubai is teaming up with the DarkMatter Group, which is the region’s first and only fully-integrated digital transformation, defense, and cybersecurity solutions provider, to fully deploy advanced cybersecurity technologies to oversee the entire digital platform, as well as the applications and data to secure the Expo 2020’s digital experience. This session will cover why Expo 2020 and DarkMatter chose Splunk as the right solution to reduce their operational requirements to single solution that is able to ingest and analyze events from every single asset (IT&IoT) supported by the automation frameworks in the solution.

Speaker(s)
Eric Eifert, DarkMatter
Eman Alawadhi, VP Cyber Security and Resilience , Expo 2020

Slides PDF link - https://conf.splunk.com/files/2019/slides/IoT1897.pdf?podcast=1577146225

Product: Splunk Enterprise, Splunk Enterprise Security, Splunk IT Service Intelligence

Track: Internet of Things

Level: Advanced

Come join two old school Splunkers as we talk about our journey building our first app on Splunk Developer Cloud. We'll discuss the fun parts and the foibles, and hopefully show you that you can teach an old Pony new tricks.

Speaker(s)
Raanan Dagan, Principal SE Architect, Splunk
Kyle Champlin, Senior Product Manager, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/DEV1377.pdf?podcast=1577146225

Product: Splunk Cloud, Splunk Developer Cloud

Track: Developer

Level: Intermediate

What in the world is this observability stuff all about? How is it different from monitoring or the other things we’ve been doing? This session will give you a crash course in observability, how to roll it out, how to practice and improve it, and how to ensure you’re getting the best bang for your buck. We’ll examine the goals, how people use the tools, and what benefits you can expect.

Speaker(s)
Cory Watson, Technical Evangelist, Splunk - SignalFx Products

Slides PDF link - https://conf.splunk.com/files/2019/slides/IT2949.pdf?podcast=1577146225

Product:

Track: IT Operations

Level:

We will share our journey, lessons, and observations from the past year of implementing compliance at the MITRE Corporation. We'll recap our path from initially learning about Defense Federal Acquisition Regulation Supplement (DFARS), also known as NIST 800-171, to complying with it. We'll share insights from the process that may help you in your compliance journey, but we'll also discuss how your journey might be different than ours, as one size never fits all with compliance.

Speaker(s)
Bob Clasen, Computer Engineer, MITRE
Eugene Katz, Splunk Evangelist, MITRE

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1372.pdf?podcast=1577146225

Product: Splunk Enterprise

Track: Security, Compliance and Fraud

Level: Good for all skill levels

In this session, we’ll explore how companies can adapt to multi-cloud environments using Google Cloud Anthos and Splunk Enterprise to maintain end-to-end visibility into these hybrid workloads. Google Kubernetes Engine (GKE) On-Prem part of Anthos brings the efficiency, speed, and scale of cloud to manage Kubernetes clusters in your datacenter. Combined with Splunk Connect for Kubernetes, we’ll show you how you get a single pane of glass to manage, monitor & secure your Kubernetes clusters across your organization. We’ll also do a deep dive on Google Cloud Platform (GCP) security controls and how to export security findings from Cloud Security Command Center and cloud asset changes from Cloud Asset Inventory all into Splunk Enterprise for further forensic analysis, to accelerate incident resolution and ensure compliance.

Speaker(s)
Alex Cain, Sr. Product Manager | Getting Data In, Splunk
Nic Stone, Solutions Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN2132.pdf?podcast=1577146225

Product: Splunk Enterprise, Splunk Cloud

Track: Foundations/Platform

Level: Intermediate

Splunk SmartStore not only reduces the storage requirements for the aged data by maintaining only one copy of the data across the indexer cluster but significantly improves the operational aspects of the indexer cluster be it recovery from node failures or data rebalancing activities. In this session, the speaker will go over the operational efficiency tests performed on traditional and SmartStore indexes and review the results.

Speaker(s)
Somu Rajarathinam, Pure Storage

Slides PDF link - https://conf.splunk.com/files/2019/slides/ITS2633.pdf?podcast=1577146225

Product: Splunk Enterprise, Splunk Enterprise Security, Splunk IT Service Intelligence

Track: IT Operations

Level: Good for all skill levels

Learn from our experience implementing Splunk Phantom so that you can speed up your automation journey. We'll examine key decisions we made with our implementation and the good and the bad that resulted. We'll also cover our automation efforts in event triage, incident response and everything in between, with walkthroughs of our top playbooks. Additionally, we'll present how we tackled Splunk alert ingestion and what Phantom could look like in a cloud-first deployment.

Speaker(s)
John Murphy, Security Analyst, NAB
Chris Hanlen, Lead Cyber Security Specialist, NAB

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1506.pdf?podcast=1577146225

Product: Splunk Enterprise, Phantom

Track: Security, Compliance and Fraud

Level: Good for all skill levels

Do you want to be an ally but don't know where or how to start? Diversity and inclusion in technology workplaces is not a women’s issue, or an issue relevant only to other underrepresented groups. Diversity and inclusion are business issues, and they are human issues. We know that businesses profit from the many benefits that diverse perspectives bring to innovation and company competitiveness. In this panel discussion, we aim to facilitate a conversation to better understand the barriers to advocacy, to promote best-practices for effective advocacy, and to enable sharing of first-hand experiences of successful advocacy.

Speaker(s)
Ammar Maraqa, SVP Strategy and Corp Dev, Splunk
Asmita Puri, Sr. Software Engineer, Splunk
Marvin Green, Principal Product Manager, Mobile, Splunk
Josh Klahr, VP of Product Management, Splunk
Robin Barre, Senior Director of Engineering, Splunk
Katrina Reid, VP Technical Program Management, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FND1829.pdf?podcast=1577146225

Product: Splunk Developer Cloud

Track: Foundations/Platform

Level: Good for all skill levels