Autoplay
Autocomplete
Previous Lesson
Complete and Continue
Splunk Fundamentals for Effective Management of SOC and SIEM
Modern Cyber Defense Principles
Modern Cyber Defense Principles (6:40)
What is SOC?
What is SOC? (4:00)
SOC Components
Building Blocks of SOC - People_guncel (7:53)
Building blocks of SOC - Process_guncel (5:02)
Building Blocks of SOC - People in detail (10:27)
Certification in a SOC Career and SOC-CSIRT (5:57)
Building Blocks of SOC - Process (12:40)
Building Blocks of SOC - Process - Runbooks (14:00)
Building Blocks of SOC - Technology (17:47)
Building Blocks of SOC - Technology 2 (10:27)
SOC Visibility (9:22)
SOC Components
Introduction to SIEM and SPLUNK (0:37)
What is SIEM (12:50)
SIEM Planning - 1 (17:54)
SIEM Planning 2 (17:34)
SIEM Architecture (7:34)
Data Collection (22:38)
How Does SIEM Work (9:30)
Log Format - I (17:00)
Log Format - II (14:16)
Log Format - III (9:35)
SIEM Components - I (16:47)
SIEM Components - II (14:36)
SIEM Components - III (17:24)
Different Types of SIEM Solutions (3:32)
Quiz
What is Splunk?
What is Splunk? What are its basics, what is it used for? (2:35)
Introduction to Splunk Architecture (4:10)
Splunk Interface Review (3:36)
Installing Splunk on Linux (6:48)
Installing Splunk on Windows OS (5:03)
Installing Splunk Cloud (6:50)
Identify Splunk Components (4:33)
Quiz
Splunk Apps: Expanding Splunk's Functionality
What are Splunk Apps? Focusing on Splunk App Store (4:44)
Splunk Apps: Expanding Splunk's Functionality (1:34)
Splunk Apps in Action (2:37)
Demonstration of Splunk Apps (7:17)
Quiz
Getting Data in Splunk
Getting Data in Splunk (3:12)
Splunk Data Routing and Indexing Infrastructure (7:47)
Forwarder Installation on Linux (8:25)
Forwarder Installation on Windows OS (4:35)
Monitor inputs (file, remote, directory, local) (4:04)
Configure local monitor inputs on Windows OS (1:47)
Configure local monitor inputs on Linux (2:57)
Configure Remote Monitor Inputs on Windows and Linux (3:58)
Network Inputs (4:32)
Scripted Inputs (4:54)
Identify Windows Input Types and Uses (5:36)
Quiz
Splunk Search Processing Language
Understanding SPL Syntax (1:47)
Fundamentals of Search Processing Language (1:47)
Splunk Search Commands (7:30)
Splunk Search Commands - 2 (12:54)
Splunk Search Commands - 3 (13:16)
Splunk Search Commands - 4 (14:36)
Splunk Functions (13:44)
Quiz
Reporting Visualization & Dashboard
Alerting on High Priority Events (7:14)
Creating Reports and Dashboards for Recurring Searches (2:31)
Visualization of Outputs (10:17)
Quiz
Regular Expression
Introduction to Regular Expression (16:59)
First Steps in Regex101-Alphanumeric Ranges and Plain Text Searches (16:54)
Special Characters in Regular Expressions and Escape Sequences (10:17)
Shortcut Character Classes in Regex - I (12:09)
Shortcut Character Classes in Regex - II.mp4 (9:51)
Comprehensive Examples in Regex - Putting What We've Learned Together_guncel (14:31)
Splunk Workshop - Ransomware Scenario Part 1
Identifying Removable Media - I.mp4 (14:46)
Splunk Workshop Ransomware Scenario - Identifying the IP Address of a Victim System.mp4 (14:00)
Identifying Removable Media - II.mp4 (13:38)
Identifying Removable Media - III.mp4 (15:18)
Identifying the Malicious File.mp4 (11:02)
Splunk Workshop - Ransomware Scenario Part 2
Identifying the Malicious File - II (7:32)
Identifying the Malicious File (14:28)
Identifying Suspicious Process Executing (11:55)
Identifying Suspicious Process Executing - II (18:06)
Identifying File Server Connections from Infected Host (13:21)
Identifying File Server Connections from Infected Host - II (5:12)
Identifying the First Suspect Domain Visited by Victim - I (8:27)
Identifying the First Suspect Domain Visited by Victim - II (15:16)
Splunk Workshop - Ransomware Scenario Part 3
Splunk Workshop 3 - Identifying the First Suspect Domain (12:42)
Splunk Workshop 3 - Identifying the Malicious File (7:58)
Identifying the Cryptor Code File Name and Origin - 1 (11:15)
Identifying the Cryptor Code File Name and Origin - 2 (8:01)
Identifying the Cryptor Code File Name and Origin - 3 (15:49)
Identifying Parent-Child Processes - 1 (5:32)
Identifying Parent-Child Processess - 2 (12:07)
Identifying Parent-Child Processes - 3 (10:33)
Which Signatures Specific to the Ransomware Alerted (5:37)
Identifying Encrypted Text Files (16:11)
Identifying Distinct PDFs Encrypted (7:54)
APT Scenario
Finding the IP Scanning Your Web Server.mp4 (14:29)
APT Prologue.mp4 (7:48)
Identifying The Web Vulnerability Scanner.mp4 (14:40)
Determining Which Server is the Target.mp4 (14:41)
Identifying Where A Brute Force Attack Originated - 1.mp4 (14:34)
Identifying Where A Brute Force Attack Originated - 2.mp4 (9:18)
Identifying the First Password Attempted in A Brute Force Attack.mp4 (14:55)
APT Scenario - 2
Identifying the Password Used To Gain Access.mp4 (12:35)
Identifying the Executable Uploaded_1.mp4 (12:47)
Identifying the Executable Uploaded - 2.mp4 (6:33)
Determining the Hash of the Uploaded File - 1.mp4 (10:20)
Determining the Hash of the Uploaded File - 2.mp4 (12:41)
Splunk Workshop Ransomware Scenario - Identifying the IP Address of a Victim System.mp4
Lesson content locked
If you're already enrolled,
you'll need to login
.
Enroll in Course to Unlock