At first glance, there are some obvious ways the two companies could come together, but analysts and IT pros also identify potential snags as Cisco prepares to absorb Splunk for $28B.
#SIEM #observability #securityanalytics #AI #Splunk #splunksecurity #cisco #fullstackobservability #securityanalytics #securityautomation
I made a Splunk app for External Attack Surface Management (EASM). It's not going to compete with the big boys, but it's powerful, extensible, free and open-source.
It wraps an API around Project Discovery's recon tools, with
Splunk running discovery jobs and dashboarding results.
- https://splunkbase.splunk.com/app/7010 (SplunkBase)
- https://github.com/gf13579/splunk_easm_worker (GitHub - Worker)
- https://github.com/gf13579/splunk_app_for_easm (GitHub - App)
My colleague @iknowuhack just published the 3rd post in our #ThreatHunting series, "Model-Assisted Threat Hunting (M-ATH) with the #PEAK Framework".
Find out how to leverage machine learning in your hunts!
https://www.splunk.com/en_us/blog/security/peak-framework-math-model-assisted-threat-hunting.html
Welcome to the third entry in our introduction to the PEAK Threat Hunting Framework! Taking our detective theme to the next level, imagine a tough case where you need to call in a specialized investigator. For these unique cases, we can use algorithmically-driven approaches called Model-Assisted Threat Hunting (M-ATH).
Are the CAs we rely on to validate web identities up to the task? Do any sign more than (or less than) their share of malicious certs?
I downloaded all 5B certs to find out.
Just published the next blog in our #SplunkSecurity #SURGe series on the #PEAK #ThreatHunting Framework: "Hypothesis-Driven Hunting with the PEAK Framework"
https://www.splunk.com/en_us/blog/security/peak-hypothesis-driven-threat-hunting.html
Look for future posts covering more hunt types and other framework topics coming soon!
Join David Bianco and special guest Aaron Gee-Clough, Senior Data Engineer at DomainTools for an interview about their collaboration for a research project evaluating the trustworthiness of certificate authorities (CAs) by analyzing five billion TLS certificates using Splunk. Link to RSA talk about the research: https://lnkd.in/g7u4qUSB Link to RSA slides: https://lnkd.in/gXB8t-Ns Link to DomainTools 2021 report: https://lnkd.in/g7vXPPt6
I love this #RSAC23 talk by Lillian Teng and my #SplunkSecurity colleague @audrastreetman on inclusive hiring in #cybersecurity.
It's way too hard to get started in this field, and we're shooting ourselves in the foot. Learn how to hire better!
If you liked the #PEAK #ThreatHunting framework we published last week, be sure to stop by the Splunk booth at #RSAC2023 (N-5770) on Wednesday at 1:30. PEAK co-creator @iknowuhack will be giving a short talk about it!
https://www.splunk.com/en_us/blog/security/peak-threat-hunting-framework.html
@splunk #SplunkSecurity #SURGe
Beth Pariseau
gregf
David J. Bianco (He/Him)
DomainTools
Tanya Janca | SheHacksPurple 
