Using the Splunk Threat Research Team’s Latest Security Content

[WhitneySink]

WATCH NOW

Tech Talk | Security Edition

Did you know the Splunk Threat Research Team regularly releases new, pre-packaged security content? Just in the last few months, the team has released dozens of new and updated detections and analytics stories covering the latest threats, including malware campaigns, zero-day vulnerabilities, CVEs, and more.

Join this Tech Talk to learn more from Michael Haag, Principal Threat Researcher, who will provide:

• Best practices for accessing and using the team’s content in the Splunk ES Content Update (ESCU) app
• An overview of the team’s content updates between November and January
• Deeper dives into new content for detecting DarkGate malware, Office 365 account takeover, and Windows Attack Surface Reduction events

WATCH HERE