Our Splunk Phantom Journey: Implementation, Lessons Learned, and Playbook Walkthroughs [Splunk Enterprise, Phantom]
Update: 2019-12-24
Description
Learn from our experience implementing Splunk Phantom so that you can speed up your automation journey. We'll examine key decisions we made with our implementation and the good and the bad that resulted. We'll also cover our automation efforts in event triage, incident response and everything in between, with walkthroughs of our top playbooks. Additionally, we'll present how we tackled Splunk alert ingestion and what Phantom could look like in a cloud-first deployment.
Speaker(s)
John Murphy, Security Analyst, NAB
Chris Hanlen, Lead Cyber Security Specialist, NAB
Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1506.pdf?podcast=1577146239
Product: Splunk Enterprise, Phantom
Track: Security, Compliance and Fraud
Level: Good for all skill levels

Speaker(s)
John Murphy, Security Analyst, NAB
Chris Hanlen, Lead Cyber Security Specialist, NAB
Slides PDF link - https://conf.splunk.com/files/2019/slides/SEC1506.pdf?podcast=1577146239
Product: Splunk Enterprise, Phantom
Track: Security, Compliance and Fraud
Level: Good for all skill levels
Comments
In Channel