Investigating a Hack with Splunk and the Cyber Kill Chain Part 2

In this four part series of videos we examine how you can use Splunk and the Lockheed Martin Kill Chain to investigate a data breach.

In Part 2 we try to uncover the reconnaissance our adversary carried out in this data breach using Splunk.

Links

Introduction to the Splunk Security Dataset
https://www.splunk.com/blog/2018/05/03/introducing-the-security-datasets-project.html#

Splunk Security Datasets on GitHub
https://github.com/splunk/securitydatasets

Boss of the SOC Team Competition Scoring Application
https://www.splunk.com/blog/2018/05/10/boss-of-the-soc-scoring-server-questions-and-answers-and-dataset-open-sourced-and-ready-for-download.html

Splunk Online Live Access to the Splunk Security Project
https://live.splunk.com/splunk-security-dataset-project

Видео Investigating a Hack with Splunk and the Cyber Kill Chain Part 2 канала ShaneInSweden