Autoplay
Autocomplete
Previous Lesson
Complete and Continue
Splunk | Splunk Core Certified Power User SPLK 1002 Prep
Intro to "Splunk | Splunk Core Certified Power User SPLK 1002 Prep" course
Introduction Section (9:59)
What will we learn in the course? (0:57)
Using Transforming Commands for Visualizations
What will you learn in this section? (1:30)
Use The Chart Command (2:19)
Use The Timechart Command (4:02)
Filtering and Formatting Results
What will you learn in this section? (2:12)
The eval command (7:42)
Use the search and where commands to filter (5:16)
The fillnull command (2:43)
Correlating Events
What will you learn in this section? (3:27)
Identify transactions (9:03)
Group events using fields (7:58)
Group events using fields and time (5:26)
Search with transactions (9:52)
Report on transactions (6:14)
Determine when to use transactions vs. stats (4:42)
Creating and Managing Fields
What will you learn in this section? (3:09)
Perform regex field extractions using the Field Extractor (FX) (7:21)
Perform delimiter field extractions using the FX (5:34)
Creating Field Aliases and Calculated Fields
What will you learn in this section? (2:30)
Describe, create, and use field aliases (2:48)
Describe, create, and use calculated fields (3:26)
Creating Tags and Event Types
What will you learn in this section? (2:56)
Create and use tags (3:11)
Describe event types and their uses (4:27)
Create an event type (1:42)
Creating and Using Macros
What will you learn in this section? (2:01)
Describe macros (4:04)
Create and use basic macro (5:02)
Define arguments and variables for a macro (4:34)
Add and use arguments with a macro (10:08)
Creating and Using Workflow Actions
What will you learn in this section? (1:52)
Describe the function of GET, POST, and Search workflow actions (3:32)
Create a GET workflow action (6:12)
Create a POST workflow action (2:35)
Create a Search workflow action (3:22)
Creating Data Models
What will you learn in this section? (1:58)
Describe the relationship between data models and pivot (4:24)
Identify data model attributes (9:30)
Create a data model (6:38)
Using the Common Information Model (CIM) Add-On
Describe the Splunk CIM (5:10)
What will you learn in this section? (2:37)
List the knowledge objects included with the Splunk CIM Add-On (4:07)
Use the CIM Add-On to normalize data (6:53)
Regular Expression 101
Introduction to Regular Expression (16:59)
First Steps in Regex101-Alphanumeric Ranges and Plain Text Searches (16:54)
Special Characters in Regular Expressions and Escape Sequences (10:17)
Shortcut Character Classes in Regex - I (12:09)
Shortcut Character Classes in Regex - II.mp4 (9:51)
Comprehensive Examples in Regex - Putting What We've Learned Together (14:31)
Splunk Workshop - Ransomware Scenario Part 1
Splunk Workshop Ransomware Scenario - Identifying the IP Address of a Victim System (14:00)
Identifying Removable Media - I (14:46)
Identifying Removable Media - II (13:38)
Identifying Removable Media - III (15:18)
Identifying the Malicious File (11:02)
Splunk Workshop - Ransomware Scenario Part 2
Identifying the Malicious File (14:28)
Identifying the Malicious File - II (7:32)
Identifying Suspicious Process Executing (11:55)
Identifying Suspicious Process Executing - II (18:06)
Identifying File Server Connections from Infected Host (13:21)
Identifying File Server Connections from Infected Host - II (5:12)
Identifying the First Suspect Domain Visited by Victim - I (8:27)
Identifying the First Suspect Domain Visited by Victim - II (15:16)
Splunk Workshop - Ransomware Scenario Part 3
Splunk Workshop 3 - Identifying the First Suspect Domain (12:42)
Splunk Workshop 3 - Identifying the Malicious File (7:58)
Identifying the Cryptor Code File Name and Origin - 1 (11:15)
Identifying the Cryptor Code File Name and Origin - 2 (8:01)
Identifying the Cryptor Code File Name and Origin - 3 (15:49)
Identifying Parent-Child Processes - 1 (5:32)
Identifying Parent-Child Processess - 2 (12:07)
Identifying Parent-Child Processes - 3 (10:33)
Which Signatures Specific to the Ransomware Alerted (5:37)
Identifying Encrypted Text Files (16:11)
Identifying Distinct PDFs Encrypted (7:54)
APT Scenario
Finding the IP Scanning Your Web Server (14:29)
APT Prologue (7:48)
Identifying The Web Vulnerability Scanner (14:40)
Determining Which Server is the Target (14:41)
Identifying Where A Brute Force Attack Originated - 1 (14:34)
Identifying Where A Brute Force Attack Originated - 2 (9:18)
Identifying the First Password Attempted in A Brute Force Attack (14:55)
APT Scenario - 2
Identifying the Password Used To Gain Access (12:35)
Identifying the Executable Uploaded_1 (12:47)
Identifying the Executable Uploaded - 2 (6:33)
Determining the Hash of the Uploaded File - 1 (10:20)
Determining the Hash of the Uploaded File - 2 (12:41)
Splunk Workshop 3 - Identifying the First Suspect Domain
Lesson content locked
If you're already enrolled,
you'll need to login
.
Enroll in Course to Unlock