Security Lunch & Learn

The Security Lunch and Learn is a modular, hands-on workshop designed to familiarize participants with how to leverage Splunk to search security events. This workshop provides users a way to gain familiarity with searching in Splunk, as well as a introducing a set of commands that allow a user to effectively exam their security events. The workshop leverages the popular Boss of the SOC (BOTS) dataset in a question and answer format. Users will come away with a better understanding of how to search in Splunk as well as learn specific search commands and when to use them.