April 2023 | Check out the latest and greatest
Unify Your SecOps with Splunk Mission Control: Watch the Webinar
The convergence of SIEM and SOAR technologies simplifies and modernizes investigations by integrating detections, response templates, and automation. Watch this webinar to learn how Splunk Mission Control strengthens your digital resilience by bringing order to your security operations' chaos and allows you to simplify your security workflows.
New Detections from the Splunk Threat Research Team
The Splunk Threat Research Team (STRT) has had two releases of security content in the last month, which provide you with 34 new detections and 4 new analytic stories. The new security content is available via the ESCU application update process or via Splunk Security Essentials (SSE).
Content release highlights include:
- Detections related to CVE-2023-23397, a critical elevation of privilege (EoP) vulnerability affecting Microsoft Outlook for Windows
- A proof-of-concept for CVE-2023-21716, a critical vulnerability in Microsoft Word that allows remote code execution utilizing a heap corruption in rich text files
- Detections related to Okta IM2 logs for detecting suspicious authentication-based security attacks
- Identifying the use of Silver, an OSS cross-platform adversary emulation/red team framework produced by BishopFox, that has gained more traction with adversaries as it is often seen as an alternative to Cobalt Strike
The Splunk Threat Research Team has also published the following blogs to help you stay ahead of threats:
- AsyncRAT Crusade: Detections and Defense
- Breaking the Chain: Defending Against Certificate Services Abuse
- Threat Advisory: SwiftSlicer Wiper STRT-TA03
- Machine Learning in Security: Detecting Suspicious Processes Using Recurrent Neural Networks
Join Splunk at RSA Conference 2023
Splunk is excited to be joining the cybersecurity community back at the Moscone Center in April for RSAC. Stop by booth 5770 in the north expo to pick up a copy of the brand new book we’ll be releasing at the event, Bluenomicon: The Network Defender’s Compendium, and pick up some Splunk goodies. Learn more about Splunk at RSAC and sign up for a 15 minute conversation with a subject matter expert in the booth here.
My Username Fields Have Passwords in Them! What Do I Do?
Learn about the risks of password disclosure in authentication logs and how to use Security Orchestration Automation and Response (SOAR) to address this risk in near-real time in our recent blog.
.conf23 Registration is Open
This year’s event will be taking place July 17-20, 2023 at The Venetian Resort Las Vegas. Splunk University will be offered July, 15, 16, 17 and 20th. Join us for over 200 sessions, compelling keynotes and guest speakers, product demonstrations, networking and so much more. You’ll learn from your peers who are addressing real-world security challenges, and we’ll cover a wide range of contemporary security topics from compliance to detection and response. Visit conf.splunk.com for more information.
Overcome Cybersecurity Challenges to Improve Digital Resilience
At Splunk we strive to help customers overcome common security challenges associated with people, processes and technology. Read more to learn how automation, unified security operations, and tackling security as a data problem can help solve key cybersecurity challenges to improve digital resilience.
EDUCATION CORNER
Reminder! New Splunk Learning Platform Launching on May 22!
We’re so appreciative of all the curious learners out there who turn to Splunk Education to boost their careers and help their organizations stay resilient. We want to keep you coming back for more, which is why we are launching a new Splunk Learning Platform. This new, feature-rich platform houses all your in-progress eLearning, your in-person enrollments, your completed training, and your course completion certificates.
Pro Tip: If you have in-progress coursework, please complete it before May 17 – or you’ll lose your completion progress and will have to start over. And, note that the system will be down between May 17-21. It will all be worth it come May 22!
15K Subscribers Unite to Use YouTube for Splunk How-To
Join other like-minded, Splunk enthusiasts on the Splunk YouTube channel dedicated to short, how-to videos and tutorials. This is the place to go if you have a question about using Splunk – demos on things like basic searching, creating reports, creating alerts, using visualizations, and so much more. And, there are playlists for users, administrators, developers, and for use cases too! Free training from Splunk has never been more accessible and self-service beats opening a ticket any day! https://www.youtube.com/@SplunkHowTo
Thought Leaders are Validating Training Rigor
If you have taken Splunk training courses, then you’re one of thousands every month who recognizes the value of Splunk and the technical training necessary to stay ahead in this exploding digital universe. According to the experts on the Power of Tech Education Podcast, your continued training and upskilling in tech education is just what the industry needs to fill a growing skills gap as we move into a more digital world.
Take a listen to what an industry influencer, a Splunk thought leader, and an actual Splunk user/expert have to say about bridging the skills gap through continuous education and training in this new 3-part podcast series.
We’ve also got a wealth of new use cases, product tips, and more to share with you.
Head to our monthly Community blog to check out all of the details!
Machine Learning in Security: Elevate Your DGA Detection Game
Tuesday, May 2nd | Register Now
Join Splunk at the Digital Resilience Summit on 2 dates in Australia to hear first hand from industry thought leaders and solution experts to discover how you can build a more secure and resilient organisation. Tuesday, May 2nd in Sydney and Thursday, May 4th in Melbourne.
We’ll explore the current market environment, trends and common challenges organisations are facing. You’ll learn ways to overcome these challenges and the critical success factors to be able to prevent major issues, absorb shocks to digital systems and accelerate transformation.
Until Next Month,
Happy Splunking
