Let's face it, sometimes you don't know what you don't know. With vast amounts of cloud data coming in at cloud-speed, it can be difficult to see through the noise and know what to look for. Are malicious adversaries attempting to comprise the environment? Is my environment under- or over-provisioned? Do I have an insider possibly exfiltrating company data? Are employees actually using the services? What is all of this costing per service, department, business unit? Don't worry, we will help you figure all this out in a prescriptive manner by showcasing these and other use cases. Then, we will show you the "how" by exposing the searches, the data needed, and showing you how to onboard that data. You will walk away with use cases that can be implemented immediately in your own environment.

Speaker(s)
Jason Conger, Solution Architect, Splunk
Ry Lait, Senior Sales Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1328.pdf?podcast=1576909568

Women are underrepresented across all levels of the technology industry. Find out how these four female leaders advanced their careers to lead the industry. Join us for an in-depth discussion about female diversity and the importance of including women in leadership from those who've made it to the top.

Speaker(s)
Suzanne McGovern, Chief Diversity Officer & Head of Talent, Splunk
Jane Hite-Syed, NGS CIO, National Government Services
Patty Morrison, Splunk Board Member, Splunk
Monika Panpaliya, Senior Director, Digital Common Services, Boeing
Carol Jones, CIO, Sandia National Laboratories

Slides PDF link - https://conf.splunk.com/files/2019/slides/FND1268.pdf?podcast=1576909568

Join this session to learn the do’s and dont’s of rolling an effective cloud security visibility platform for a global organization. We will cover topics such as why we moved away from our previous SIEM provider, deploying and managing a cloud-based SIEM, and effectively using a third party organization to provide tier 1 and 2 event and incident support.

Speaker(s)
Simon O’Brien, Principal Sales Engineer, Splunk
Grant Slender, Chief Information Security Officer, QIC

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1205.pdf?podcast=1576909568

Organizations today struggle with quickly and consistently applying behavior-based threat intelligence across their security tools. The hours needed to stitch together this information manually leave analysts unprepared to quickly turnaround questions from management about their vulnerability to threats that their management sees in the news. In this session we will demonstrate how to use Splunk Phantom to reduce that time lag by automating your threat hunts. Specifically, we will show you how to use Yet Another Recursive Algorithm (YARA) rules on endpoint and network security tools automatically and simultaneously. We will use a case study to show the benefits achieved from this playbook: better reporting, more robust procedures, faster time to detect malware variants, and generally more efficient and effective threat hunts.

Speaker(s)
Robb Mayeski, Security Automation Magician , EY
Will Burger, Security Automation Consultant, EY
Haris Shawl, EY

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1280.pdf?podcast=1576909568

As the types of devices and applications used in IT organizations increase exponentially, scaling the analytics-driven SOC becomes even more imperative. In this session Splunk Professional Services will help you learn from its past experiences architecting Splunk Enterprise Security environments for scale into the terabytes per day. We will share technical details on improvements to search technology and Data Model Acceleration in Splunk Enterprise that will help you increase performance and decrease total cost of ownership. We will also take a deep dive under-the-hood into Splunk Enterprise Security Frameworks in which you should make special considerations for high volume.  Finally, we'll share important metrics on how to monitor the ongoing health of your Enterprise Security deployment, ensuring you stay on track over time, even in periods of rapid growth.

Speaker(s)
Marquis Montgomery, Principal Security Architect, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC2120.pdf?podcast=1576909568

The Census is the nation’s largest peacetime mobilization effort and determines congressional representation. Census data is used by businesses, governments and civic organizations to inform decision-making and this year the Census is going mobile and online for the first time. This means that security is a top priority in ensuring the success of the 2020 Decennial. This segment of the conference will explore security related topics to include vulnerabilities, scalability and performance, with a special focus on Data Privacy, Compliance and Reputational Threat Management. If all things data and IT Security excite you, then this session is for you. Census executives Atri Kalluri and Zack Schwartz will provide a behind the scenes overview of the systems supporting the 2020 Decennial, including Splunk, and real world case studies on how the Census Bureau is adopting best practices across IT security and social media monitoring to ensure the security of respondent data.

Speaker(s)
Atri Kalluri, Senior Advocate, Response Security and Data Integrity, U.S. Census Bureau
Zack Scwhartz, IT Program Manager, U.S. Census Bureau

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC2638.pdf?podcast=1576909567

After breaches, incident response teams often end up with an overwhelming amount of forensic evidence data, including disk images, memory captures, PCAP, and more. We'll show you how one of our IR/forensics teams is ingesting this data into Splunk to answer the who, what, where, when and why of breaches. Our presentation will show you how to use Splunk Enterprise and Splunk Enterprise Security for Incident Response (IR) workflow tracking and reporting on multi-source forensic data captures.

Speaker(s)
Josh Wilson, Consulting Engineer, August Schell
Dave Martin, Supervisory Special Agent, Federal Bureau of Investigation

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1796.pdf?podcast=1576909567

What if you can scale test your Splunk Enterprise with multi-terabyte of data ingest followed by concurrent search tests on the loaded data? Attend this session to learn more about the framework for multi-terabyte data generation and multi-user search tests on Splunk Enterprise 7.2+.

Speaker(s)
Somu Rajarathinam, Pure Storage

Slides PDF link - https://conf.splunk.com/files/2019/slides/ITS2634.pdf?podcast=1576909567

Splunk SmartStore not only reduces the storage requirements for the aged data by maintaining only one copy of the data across the indexer cluster but significantly improves the operational aspects of the indexer cluster be it recovery from node failures or data rebalancing activities. In this session, the speaker will go over the operational efficiency tests performed on traditional and SmartStore indexes and review the results.

Speaker(s)
Somu Rajarathinam, Pure Storage

Slides PDF link - https://conf.splunk.com/files/2019/slides/ITS2633.pdf?podcast=1576909567

Last year, after our outrageously successful talk "Pull Up Your SOCs: A Splunk Primer on Building or Rebuilding your Security Operations", we wanted to revisit this topic to cover changes in Security Operations that have taken place over the last 12 months. Whether you’re starting from scratch or rebuilding your security program, the first twelve months of standing up your security operations is absolutely critical to success.

Speaker(s)
Dimitri McKay, Staff Security Architect | Jedi Master, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC2186.pdf?podcast=1576909567