Splunk - Mastering Security Data Analysis

Splunk - Mastering Security Data Analysis
Published 4/2024
MP4 | Video: h264, 1920x1080 | Audio: AAC, 44.1 KHz
Language: English

| Size: 1.12 GB[/center]
| Duration: 2h 9m
Master how to analyze data with Splunk, starting from scratch and following a hands-on approach with real use cases.

What you'll learn

Configure splunk enterprise in Windows and Linux

Understand the different versions and architectures of Splunk

Understand SPL, the splunk search language

Create reports, dashboards and alerts

Deploy and configure Splunk forwarders in Windows and Linux

Real Splunk use cases for security teams

Requirements

Foundational knowledge about Linux and Windows is recommended, but not mandatory

Previous experience with the Linux command line is recommended, but not mandatory

Previous experience with Windows Event log would be useful

Description

Do you want to learn how to use Splunk from scratch and through practical examples? Are you targeting the Splunk Core Certified user exam? Then this course is for you!This is the best course in English for beginngers to learn about Splunk, the leading platform in real-time monitoring, operational intelligence, log management, and SIEM (Security Information and Event Manager). Some of the world's most important companies such as Salesforce, Akamai, or Bank of America use the full potential of this tool to exploit data aggregated from a multitude of information sources. Your instructor will be Alejandro Gómez, a professional with more than 8 years of experience in the world of cybersecurity who uses Splunk on a daily basis to quickly and efficiently detect and respond to security incidents.This course provides students with a simple and practical explanation of the most important Splunk concepts, including:What versions exist and what their features are.How to install a Splunk Enterprise instance on Windows and Linux.What are the different Splunk deployment architectures.How to perform searches.How to use the SPL language.How to create reports, visualizations, and dashboards.How to deploy Splunk forwarders in Linux and WindowsHow to perform detection and alerting on several information security events use casesTo facilitate the understanding of the content, the course has a completely practical approach and includes multiple tasks and quizzes to ensure that the student comprehends and internalizes the content correctly.See you in Splunk class, Splunkers! :)

Overview

Section 1: Introduction

Lecture 1 What is Splunk?

Lecture 2 Basic Splunk components

Lecture 3 Versions and architectures

Lecture 4 Installing Splunk in Windows

Lecture 5 Installing Splunk in Linux

Lecture 6 Introducing data in Splunk

Section 2: Searches and SPL language

Lecture 7 Basic searches

Lecture 8 Using fields in searches

Lecture 9 Best practices for optimizing searches

Lecture 10 Search Processing Language (SPL)

Section 3: Common SPL commands and functions

Lecture 11 Field and table commands

Lecture 12 Rename and dedup commands

Lecture 13 Sort, top and rare commands

Lecture 14 Stats command & count and dc functions

Lecture 15 Sum and avg commands

Lecture 16 List and value functions

Section 4: Reports and visualizations

Lecture 17 Reports and visualizations

Lecture 18 Dashboards

Lecture 19 Pivots and data sets

Lecture 20 Creating and using Lookups

Lecture 21 Alerts

People who have an interest in the world of data analysis and Big Data.,Individuals who wish to learn the basic concepts of Splunk for personal or professional purposes,People who want to get certified in Splunk and want to master the basic concepts before starting their certification preparations.,Security professionals who want to use Splunk to detect and alert on security incidents