Name: The Top 5 Boring Tasks Every Security Team Should Automate
Start: 2022-01-19T13:00:00Z
End: 2022-01-19T13:42:03.000Z
Location: BrightTALK

Splunk is the world’s first Data-to-Everything Platform. Now organizations no longer need to worry about where their data is coming from, and they are free to focus on the business outcomes that data can deliver. Innovators in IT, Security, IoT and business operations can now get a complete view of their business in real time, turn data into business outcomes, and embrace technologies that prepare them for a data-driven future.

2021 was a roller coaster — from SolarWinds to ransomware to pipeline attacks to even more ransomware. The job keeps getting harder, and the stakes keep getting higher. Splunk’s SURGe team of security experts has thoughts on what’s coming in 2022, and how to defend against it.

Join our webinar, Splunk Data Security Predictions 2022, to understand the strategic challenges ahead and the most effective approaches including:
- Securing your software supply chain in a modern world
- Zero trust: The best time to implement was last year. The second best time is today
- DevSecOps: Your company is doing devops today. Are you ready to defend it?
- Blue collar for the blue team: Never underestimate the basics

Splunk Data Security Predictions 2022: How to stay ahead of the bad guys in 2022

The security operations center (SOC) is constantly overwhelmed. Analysts are drowning in security alerts, with far too many threats to investigate and resolve each day. Security operations work is rife with monotonous, repetitive tasks. To make matters worse, there’s a significant shortage of cybersecurity professionals to do the work.

How can teams eliminate analyst grunt work, resolve every security alert every day, and investigate and respond to security incidents faster than ever? A Security Orchestration, Automation and Response (SOAR) tool may provide solutions to these problems. And while it may not be a “silver bullet” solution capable of solving all these problems overnight, if implemented and managed properly, SOAR can drastically increase the speed and productivity of your SOC.

Join Pete Shoard, Gartner VP Analyst, and Jane Wong, VP of Security Products at Splunk, as they discuss strategies to successfully implement, manage, and get the most out of a SOAR solution.

A Path to Smarter Security Operations

What beginners need to know about keeping Kubernetes operational.

If you are on your journey to the cloud, containers and microservices, Kubernetes is an important part of that journey, and it's still a big lift. In addition, it’s no secret that Kubernetes is challenging to observe with traditional tools. The top challenges with Kubernetes that we will thoughtfully address are speed, scale, and more context.

In this webinar, we’ll cover key considerations specifically for organizations embarking on this journey and how to keep Kubernetes operational in the process.

What enterprises need to keep in mind as they transition to Kubernetes for production
What beginners need to know about keeping Kubernetes operational
How Splunk Infrastructure Monitoring can help and what that looks like

Kubernetes Observability for Beginners

Companies must deliver more digital services to customers, and any outage poses a great risk to reputation and revenue. The need for end-to-end visibility increasingly underpins the critical relationship between IT and business teams. This session will explain why lines of business continue to face the risks and costs of service degradation and outages and help you understand how to associate infrastructure and application metrics with the drivers of the end-user and business health KPIs to really become a business partner.

Rethink IT Series Session Four: Shift from a “Silo Lens” to a “Service Lens”

Case management ensures that threats are proactively identified, prioritized, and rapidly investigated. This functionality is built into Splunk SOAR, and allows you to codify your standard operating procedures into reusable templates. In this session, we’ll show you how Uber uses Splunk SOAR case management functionality to create custom lists and design playbooks, reducing time spent to engage, mitigate and resolve threats.

Automation for the Modern SOC: How Uber Implements Splunk SOAR Case Management

Automation for the Modern Soc Series, Episode One : Strategies for Smarter Security Operations

The SOC is overwhelmed. Analysts are drowning in security alerts and operations work is rife with monotonous, repetitive tasks. There is a talent shortage of qualified security professionals to staff SOCs and to top it all off, mean time to detect, triage, and respond to threats is still too slow. Sound familiar? Stop being overwhelmed. In this session, we’ll teach you how Splunk SOAR allows you to work smarter, respond faster, and strengthen your defenses in both on-prem and cloud environments!

Automation for the Modern SOC: Strategies for Smarter Security Operations

The complexity of modern IT environments has not only increased the volume of events that IT ops and DevOps professionals must cope with but also significantly magnified the noise to signal ratio. Before one can even begin to make sense of IT system behaviours, one must clear away vast quantities of 'junk data.' Upgrading event and incident management systems is necessary to boost productivity and stop being seen as " just a cost centre". Join this session to learn how you can leverage the power of end-to-end machine learning driven intelligence to unlock operational efficiency and cost savings.

'Rethink IT', Session Three: Separate Signal from all that Event Noise with AI

Session 2: Master the New Monitoring Imperatives of a Digital World

On average, cloud-native apps extend across 2.25 public cloud environments, according to the "State of Observability 2021". This adds to an already complex architecture organizations are investing in to serve customers in a more digital way. So how can you manage this complexity and effectively identify, investigate and resolve critical issues in distributed and multicloud environments? This session will explore the paradigm shift in monitoring and how you can achieve portability, visibility and validation.

'Rethink IT' Series, Session Two: Master the New Monitoring Imperatives

Agility and speed of digital attacks are the biggest hurdles a SOC team can face today. Mitigating cyber threats is often only partially possible as new devices, applications, services and service providers are added to the enterprise landscape daily - constantly creating brand new attack surfaces.

Increasing an organisation's IT security operations maturity level to expand cyber defence capabilities is inevitable in the age of digitalisation. Over 50% of companies with more than 2,500 employees have already taken this step, with 72% of them only doing so in the last 5 years. Many start with security monitoring, laying the foundations for increased IT risk visibility - but what comes after that, and how do you continue to ‘level up’?

Join us as we think outside of the box on how to rank and grow your cyber defense capabilities. The session will cover:

- How to define maturity levels in cybersecurity operations
- A comparison of different maturity models, diving into advantages and disadvantages
- A ‘Practice Maturity Check’ on establishing readiness and the effective use of SIEM/Security Analytics
- A ‘Practice Maturity Check’ on evaluating SOAR as the right solution and how to get started

SOC Maturity-Understanding and Determining the Right Level for Your Organization

Accelerated migration to the cloud, remote work, and customer expectations around experience is causing new challenges for IT teams. As your organization's systems become more complex, ephemeral and distributed, you will need full visibility across the infrastructure, application services, and business services to get a full picture of your systems' state and ensure you are delivering what the business needs. This session will share some of the most common pain points we hear from our customers, and provide an overview of the new thinking that is helping IT teams successfully navigate the “new normal”.

'Rethink IT' Series, Session One : New World, New Imperatives

Sanofi, one of the world’s leading pharmaceutical organizations provide a wide range of products and services from vaccines, immunology to cancer treatments.

Watch how Sanofi’s global monitoring team are using Splunk as an integral part of their digital transformation roadmap to:

Reduce operational effort
Extend infrastructure monitoring capabilities
Move from a one-size fits all approach to tailored, proactive monitoring
Watch the on-demand session from Alexander Kreussler, Head of Global Monitoring Services as he presents Sanofi’s Splunk journey including migrating legacy and application monitoring infrastructure and how Splunk is now used by every technology team for monitoring, troubleshooting and diagnostics across 150+ users.

Sanofi: Global Monitoring with Splunk

Security analysts have a tough gig. The past year has seen social engineering remain the biggest threat vector alongside the emergence of supply chain attacks. These higher-profile and more complex attacks will continue, and they’ll proliferate as they become commoditized. According to the IDC European Security Survey 2021, there is wide recognition of the near inevitability of cyberattacks. So what should organisations worry about as we enter 2022 and how can security leaders best support their security operations teams? 

We can’t hide from threats. They’re coming (they’re already here). Join this session to hear our expert panel discuss their predictions for the threat landscape in 2022 and how to evolve to stay ahead of it.

Security Predictions 2022: How to Stay Ahead of the Curve

83% of organizations are looking for new monitoring approaches to handle today’s cloud complexity. IT teams are challenged with monitoring cloud services and mission-critical applications by separate tools which lead to swivel chair approaches, runaway costs, and fragmented operational data getting trapped in siloed tools. This creates blind spots that halt teams’ ability to quickly detect and resolve issues, and negatively impacts customer experiences.

What if there was a way to unify monitoring and investigation across the entire cloud stack? Wouldn’t the jobs of cloud architects and system administrators be so much easier if there were consolidated views enabling faster mean-time-to-detect (MTTD) and mean-time-to-resolution (MTTR)? Splunk is helping organizations across the globe accelerate their cloud journey with its analytics-driven, multicloud monitoring solution. Join our webinar, "Best Practices for Multicloud Monitoring & Investigation" where you’ll learn:

Top trends in the market to maximize IT performance with a multicloud monitoring strategy
What capabilities organizations need to look out for when choosing the right tools
How to best optimize hybrid and multicloud management
How Splunk helps organizations tackle cloud complexity challenges
Why a remote workforce makes AIOps even more relevant today

Best Practices for Multicloud Monitoring & Investigation

Die Agilität und Geschwindigkeit digitaler Angriffe gehören zu den größten Hürden für moderne SOC-Teams. Im Zeitalter der Digitalisierung ist es unerlässlich, den Reifegrad des IT-Sicherheitsbetriebs eines Unternehmens zu steigern, um so den Cyberschutz auszubauen. Viele Unternehmen beginnen dafür mit Security-Monitoring. Sie schaffen damit die Grundlage für mehr Sichtbarkeit bei IT-Risiken. Doch was kommt danach und wie baut man den Reifegrad weiter aus?
Erfahren Sie, wie Sie Ihre Cyber-Abwehrmöglichkeiten auf- und ausbauen können. Themen dieser Session sind:
Definieren von Reifegraden im Sicherheitsbetrieb
Ein Vergleich verschiedener Reifegradmodelle und deren Vor- und Nachteile
Ein „Reifegrad-Praxischeck“ zur Beurteilung, wie bereit Ihr Unternehmen für SIEM/Security Analytics ist bzw. wie effektiv es diese Technologien nutzt
Ein „Reifegrad-Praxischeck“ zur Bewertung von SOAR als passende Lösung und die ersten Schritte damit

So ermitteln und verstehen Sie den passenden SOC-Reifegrad für Ihr Unternehmen

Aujourd’hui, la pluralité et la vitesse des cyberattaques sont les plus grandes difficultés auxquelles une équipe SOC fait face.

Bien souvent, l’ajout quotidien de nouveaux dispositifs, applications et prestataires dans l’environnement IT de l’entreprise, sources de nouvelles surfaces d’attaque, complique la lutte contre les cybermenaces.

Nombre d’entre elles commencent par la supervision de la sécurité, posant ainsi les bases d’une meilleure visibilité des risques IT, mais que faire ensuite ? Comment continuer à « gagner des niveaux » ?

Joignez-vous à notre réflexion pour savoir comment développer vos capacités de cyberdéfense. Ce webinaire présentera :

comment définir les niveaux de maturité de vos opérations de sécurité ;
une comparaison des différents modèles de maturité, leurs avantages et leurs inconvénients ;
un « contrôle de maturité » permettant d’établir l’utilisation judicieuse et efficace de solutions d’analyse de sécurité/SIEM ;
un « contrôle de maturité » permettant de déterminer si le recours à une solution SOAR est judicieux, et comment la mettre en place.

Une sécurité pilotée par les données pour un SOC moderne

Who Should Attend: Splunk Administrators, IT Analysts, NOC Managers

Faster Time to Value with ITSI Content Packs
Disparate services cause confusion across distributed teams, and onboarding to a new platform takes time and resources. With ITSI Content Packs, you can now set up your services with only a few clicks, for even faster time to value. Whether you’re invested in Microsoft 365 or SAP - we’ve got you covered.

Join this tech talk to learn about:

- How the Content Library helps you gain access to content packs across common tools and services you already use
- How to install Content Packs through the Content Library
- Best practices to gain the most out of ITSI
- Bulk updating of content packs through Splunkbase

Faster Time to Value with ITSI Content Packs

Monitoring Core Web Vitals is, well, vital to ensuring users have a great experience when visiting your website, and are essential to driving traffic to your website. They are the most modern way to quantify the performance and user experience of a web property. Not only are Largest Contentful Paint (LCP), First Input Delay (FID), and Cumulative Layout Shift (CLS) important when optimizing your site, starting in Summer 2021 Google will begin using these three metrics as a factor in a site’s search rankings.

The importance of incorporating Web Vitals into your Observability practice is larger than ever. With Splunk Synthetic Monitoring you can proactively run tests to measure the performance of Google Web Vitals on your company’s website and alert you on any issue. And if your website needs improvement, our Web Optimization feature will run through hundreds of best practices, providing you with actionable insights to improve your user experience.

Join Splunk’s Billy Hoffman for a deep dive into Core Web Vitals and see why incorporating these user-centric metrics into your deployments can create great user experiences and improve your business.

In this webinar you will learn:
- What Core Web Vitals are, how they’re measured, and why they’re important to both the business and your Google ranking.
- What aspects of a website, such as JavaScript size or critical rendering path, impact each metric.
- How to measure Google Web Vitals on your website.
- Which Performance optimizations should be adopted to improve specific Web Vitals.
- Best practices for benchmarking and improving web vitals scores.
- How organizations can put systems in place to prevent regressions.

How to Use Digital Experience Monitoring to Improve Core Web Vitals

Detection engineers consistently come up with excellent rules and heuristics to detect malicious and anomalous behaviors in their environment; a perfect example of this is password spraying. But since we can’t have nice things, there is always software or behaviors that violate the base assumption for that detection. This doesn’t invalidate the rule, but it does require that the rule have exceptions built into the rules. Doing this manually is tedious and time consuming. When a rule consistently gives false positives, it is natural and understandable to just ignore the rule. But that comes at the expense of when the rule detects something that is malicious.

In this talk we will use password spraying as an example use case to showcase how detections can be matured through the use of Machine Learning.

- Join our webinar, “Enhance your Security Detections with Machine Learning” and learn:
- How to take a data driven approach to detection development
- How to mature a detection to detect increasingly sophisticated attackers
- How to use Splunk’s Machine Learning Toolkit to understand behaviors

Enhance your Security Detections with Machine Learning

Security analysts are overwhelmed by repetitive security tasks, dozens of open browser tabs, and the dreaded copy and paste function. But working in a SOC doesn't have to be a daunting experience. The dream of automating everything can become reality, without the need for a supersized security team! But how can you get started?

Join Máté from GE and Tibor from Norlys to learn about the top 5 automated playbooks they implemented that every security team should have in their repertoire.

Learn how security automation can unlock opportunity, how Máté and Tibor streamlined their security operations processes with Splunk Phantom, and how they met KPIs, like freeing up analyst time to focus on mission-critical tasks.

The Top 5 Boring Tasks Every Security Team Should Automate

Automation

Business Transformation

Enterprise Architecture

Information Security

IT Security

Operational Efficiency

SecOps

Security

Security Automation

Get powerful e-commerce insights to grow your online transaction volume. Connect with thought leaders and colleagues to get the most up-to-date knowledge on the e-commerce strategies and techniques that drive growth.

E-commerce

The marketing community on BrightTALK is made up of thousands of engaged marketing professionals. Find relevant webinars and videos on marketing strategy, branding and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Marketing

Welcome to the mobile computing community on BrightTALK! With the consumerization of IT and the widespread adoption of mobile devices across the globe, mobile computing has become an important part of many people's lives in a culture of bring your own device (BYOD). With mobile devices doubling as work phones and more employees working from home, businesses need to provide secure access to data and work applications from anywhere at any time. Join this growing community and hear from industry thought leaders in webinars and videos as they share their insight on mobile computing research and trends.

Mobile Computing

Are you an IT service management professional interested in developing your knowledge and improving your job performance? Join the IT service management community to access the latest updates from industry experts. Learn and share insights related to IT service management (ITSM) including topics such as the service desk, service catalog, problem and incident management, ITIL v4 and more. Engage with industry experts on current best practices and participate in active discussions that address the needs and challenges of the ITSM community.

IT Service Management

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

The application development community features top thought leadership focusing on optimal practices in software development, SDLC methodology, mobile app development and application development platforms and tools. Join top software engineers and coders as they cover emerging trends in everything from enterprise app development to developing for mobile platforms such as Android and iOS.

Application Development

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Practicing business intelligence allows your company to transform raw data into sets of insights for targeted business growth. The business intelligence and analytics community on BrightTALK is made up of thousands of data scientists, database administrators, business analysts and other data professionals. Find relevant webinars and videos on business analytics, business intelligence, data analysis and more presented by recognized thought leaders. Join the conversation by participating in live webinars and round table discussions.

Business Intelligence and Analytics

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Information Technology

Thousands of healthcare IT professionals compose the health IT community on BrightTALK. Learn alongside them with relevant webinars on healthcare IT compliance, big data in healthcare and IT solutions for healthcare organizations. Join the conversation by asking questions and engaging with other participants during live webinars and organized discussions.

Health IT

The research and development community on BrightTALK brings together leading professionals in healthcare, technology and manufacturing to present on current topics in their fields. From big data in healthcare to online forensics training and medical research practices, the community is an exceptional resource for those looking to expand their knowledge. Be part of the conversation by joining the community and participating in interactive live webinars.

Research and Development

Get powerful insights on how to best serve today's customers. If you want to create a successful customer experience today, you will have to appeal to the need for “alone together” time. Millennials, Gen X, Boomers or Silent Generation all look for shared but individual experiences.

Customer Experience

In the business management community, commercial experts will be sharing webinars and videos on an array of subjects. From sales and marketing, to finance, productivity and growth, this content will help you stay up-to-date with the current economic environment and provide timely management insight to drive business growth.

The Top 5 Boring Tasks Every Security Team Should Automate

Presented by

About this talk

More from this channel