Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data insights, key use cases, and tips on managing Splunk more efficiently.
We also host Getting Started Guides for a range of Splunk products, a library of Product Tips, and Data Descriptor articles that help you see everything that’s possible with data sources and data types in Splunk.
This month we’re spotlighting some new types of articles on Lantern - our new Prescriptive Adoption Motions for Security, plus a war story spotlighting how our partners work with Splunk to achieve best-in-class incident management. As usual, we’re also sharing all of the new content that got published over the past month. Read on to find out more.
Prescriptive Adoption Motions for Security
It’s not always easy to implement new security use cases. Threats evolve constantly, requiring your organization to maintain a strong security posture by utilizing the best technical expertise, best practices, and industry-specific knowledge.
Lantern’s new Prescriptive Adoption Motions for Security are designed to help. We’ve created nine adoption motions that lay out robust approaches to implementing a range of common security practices, from correlating diverse data sources to implementing risk-based alerting.
Our motions have been written by Splunk’s security experts to help you confidently implement use cases by leveraging proven practices and tailored strategies. Using them helps ensure that your organization not only realizes the full value of Splunk's security solutions, but also continues to reap their benefits in the long run. Check out the Prescriptive Adoption Motions and let us know what you think!
War story - Responding to incidents with the Splunk platform and Fox-IT's Dissect
In cybersecurity, war stories are a valuable tool to provide insights, lessons learned, and best practices for handling security incidents. We’re happy to be able to share our first war story, written in conjunction with Splunk partner Fox-IT: Responding to incidents with the Splunk platform and Fox-IT's Dissect.
The war story shows the successful integration of Splunk and Fox-IT's Dissect framework in the context of resolving complex and rapidly evolving security incidents. The story takes you through the first 72 hours of the incident, highlighting the actions taken by Fox-IT's team and the benefits derived from the integration.
By comparing their incident response process with your own, you can gain valuable insights into enhancing your own capabilities. We’re happy to be able to share this new type of learning with you - stay tuned for more like this in the future!
What Else?
This month we’ve also published several other helpful new articles on a variety of topics:
- Getting started with Splunk Security Essentials
- GitLab data descriptor
- Getting GitLab CI/CD data into the Splunk platform
- Sending GitLab webhook data to the Splunk platform
- Preparing for certificate-based authentication changes on Windows domain controllers
- Demo - Log analytics for troubleshooting with IT Essentials
We hope you’ve found this update helpful. Thanks for reading!
- Kaye Chapman, Senior Lantern Content Specialist for Splunk Lantern
