Splunk [Enterprise Security] 2019 .conf Videos w/ Slides

Let's face it, sometimes you don't know what you don't know. With vast amounts of cloud data coming in at cloud-speed, it can be difficult to see through the noise and know what to look for. Are malicious adversaries attempting to comprise the environment? Is my environment under- or over-provisioned? Do I have an insider possibly exfiltrating company data? Are employees actually using the services? What is all of this costing per service, department, business unit? Don't worry, we will help you figure all this out in a prescriptive manner by showcasing these and other use cases. Then, we will show you the "how" by exposing the searches, the data needed, and showing you how to onboard that data. You will walk away with use cases that can be implemented immediately in your own environment.

Speaker(s)
Jason Conger, Solution Architect, Splunk
Ry Lait, Senior Sales Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1328.pdf?podcast=1577146234

Endpoint security is more than detecting malware.  Most insider threats, however, don’t involve malware, but other security issues associated with the user and endpoint.  Learn how Cisco’s own InfoSec team uses Cisco Endpoint Security Analytics Built on Splunk and Cisco NGFW integration to increase its endpoint security and threat visibility.

Speaker(s)
Scott Pope, Cisco

Slides PDF link - https://conf.splunk.com/files/2019/slides/SECS2899.pdf?podcast=1577146234

You already know Splunk is amazing, but now you have to prove this to someone in your organization before you get the keys to your Splunky Supercar. Good news - we've got a solution that gets your data - not fake data - into Splunk Cloud, and makes it immediately accessible, useable and valuable to everyone in your organization. You'll be able to kick-the-tires on your new data analytics engine for 30 days at no cost. Attend this session to learn more.... Let me introduce you to the Autobahn, Splunk-style.

Speaker(s)
Ken Tallman, Sr Sales Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1452.pdf?podcast=1577146234

Are you considering moving to Splunk Cloud? This session will show you the benefits of migrating to Splunk Cloud and letting Splunk do all the heavy lifting so you can focus on getting value from your data. We also will go into what makes the Splunk Cloud service unique.

Speaker(s)
Kyle Hourihan, Principal Cloud Architect, Splunk
Kam Amir, Cloud Architect, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1647.pdf?podcast=1577146234

IBM i systems are used by many customers in a number of industries such as banking, retail, transportation and hospitality. Splunk is a perfect tool for consolidating and analyzing event, security, performance, and application data from these critical IBM i systems. Having a single and complete view of infrastructure data allows operations, security, and performance analysts to quickly identify and correlate operational, security, and performance issues. Syncsort Ironstream™ for Splunk can easily capture the needed event, security, and performance data in real time. Detailed performance data from these IBM i systems combined with Splunk’s machine learning algorithms can provide a new degree of confidence in capacity planning.

Speaker(s)
Brian Brake , Senior System Engineer, Cox Automotive
Chip Sutton, Director of Software Development, Syncsort

Slides PDF link - https://conf.splunk.com/files/2019/slides/IT1990.pdf?podcast=1577146234

Splunk Enterprise is powerful. Don't cheat yourself of its power. When making decisions as to how to expand or standup Splunk’s footprint, you need to know what matters when making platform decisions. Considering compute, storage, virtualization, cloud infrastructure is a lot. There isn’t one place to review all the options you have. We will share the Splunk way to think of performance and how it relates to the underlying system resources. This means getting into the real nuts and bolts of performance. If you want to know how search affects indexing and what resources get consumed, this is the session to attend. If you also want to know how it affects what you purchase as a platform choice, this also is the session to attend. We also will review how partners have built architectures to simplify this process.

Speaker(s)
Brian Wooden, Director, Sales Engineering GSA, Splunk
Simeon Yep, AVP, Sales Engineering Global Partners, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN1350.pdf?podcast=1577146234

Whether you have just SSE or all of Splunk's Premium Products, you can benefit from the ton of Security Content that Splunk produces. We'll start this session by setting a quick baseline on all of the fantastic detections that Security Essentials has had in the past, and then jump into the new prescriptive guides, MITRE ATT&CK™ integration, Auto-Dashboard-Magic, and all the related functionality that will help you plan your usage of any/all of Splunk's security products. We'll present all this information through the lens of helping you get the best possible detections deployed with the least amount of effort.

Speaker(s)
David Veuve, Principal Security Strategist, Splunk
Johan Bjerke, Principal Sales Engineer, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC2013.pdf?podcast=1577146234

Maturing and scaling your security operations rests on your ability to process and analyze huge volumes of often unrelated data in real time. But today's tools notoriously overwhelm SOC analysts with the sheer number of alerts and high percent of false positives, resulting in confusion about what tools to use for investigation and response. In this session, members of Splunk's Security Research Team will discuss the next generation of Enterprise Security Content Updates that they developed, which integrate the entire Splunk for Security product suite to create a robust end-to-end defense—detection, investigation, and response. We will go over how to use these security guides, which will leverage Splunk Enterprise Security, Splunk Phantom, and Splunk User Behavior Analytics. We'll also highlight the Run Story feature we built to operationalize ESCU Analytics stories and share tools and techniques customers can use to write and test their own use cases.

Speaker(s)
Bhavin Patel, Security Software Engineer, Splunk
Jose Hernandez, Security Researcher, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1775.pdf?podcast=1577146234

Winston Churchill once said, “Success is not final, failure is not fatal: it is the courage to continue that counts." Then again, Churchill wasn’t in cybersecurity...While our successes are certainly never final, our failures can absolutely be fatal—to a company and our continued employment. What's a good way to actually measure success and failure, though, outside of not appearing on the front page of the paper? Well, as CrowdStrike notes, you have on average one minute to detect an attack in progress, ten minutes to understand it, and sixty minutes to contain it. We will show how to use this 1-10-60 Rule as a measuring metric and leverage the data and capabilities within Splunk and its ecosystem to ensure that we win the survival of the fastest.

Speaker(s)
Wissam Ali-Ahmad, Lead Solutions Architect, Splunk
Tim Sullivan, Global Senior Strategic Solutions Architect, CrowdStrike

Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1573.pdf?podcast=1577146234

As Splunk Enterprise becomes more critical to organizations and business functions, it becomes crucial to maximize the uptime of the service. We'll talk about general principles of resiliency/high availability and disaster recovery, and how they apply to a Splunk deployment. We'll also discuss the various mechanisms for implementing them, levels of availability, relative advantages, and the costs of each.

Speaker(s)
Sean Delaney, Principal Architect, Splunk
Justin Hardeman, Platform Architect - Sales Engineering, Splunk

Slides PDF link - https://conf.splunk.com/files/2019/slides/FN2067.pdf?podcast=1577146233