Ultimate Splunk for Cybersecurity: Practical Strategies for SIEM Using Splunkâ s Enterprise Security (ES) for Threat Detection, Forensic Investigation, . (Security Analytics & Blockchain Defense)

Sinha, Jit

ISBN 10: 8196815026 / ISBN 13: 9788196815028

Published by Orange Education Pvt Ltd, 2024

About this Item

Most items will be dispatched the same or the next working day. A copy that has been read but remains in clean condition. All of the pages are intact and the cover is intact and the spine may show signs of wear. The book may have minor markings which are not specifically mentioned.

Seller Inventory # wbs5958414051

Bibliographic Details

• Title: Ultimate Splunk for Cybersecurity: Practical Strategies for SIEM Using Splunkâ s Enterprise Security (ES) for Threat Detection, Forensic Investigation, . (Security Analytics & Blockchain Defense)
• Publisher: Orange Education Pvt Ltd
• Publication Date: 2024
• Language: English
• ISBN 10: 8196815026
• ISBN 13: 9788196815028
• Binding: Soft cover
• Condition: Good
• Weight: 710 grams

About this title

Synopsis

Empower Your Digital Shield with Splunk Expertise!

Book Description
The Ultimate Splunk for Cybersecurity is your practical companion to utilizing Splunk for threat detection and security operations.

This in-depth guide begins with an introduction to Splunk and its role in cybersecurity, followed by a detailed discussion on configuring inputs and data sources, understanding Splunk architecture, and using Splunk Enterprise Security (ES).

It further explores topics such as data ingestion and normalization, understanding SIEM, and threat detection and response. It then delves into advanced analytics for threat detection, integration with other security tools, and automation and orchestration with Splunk.

Additionally, it covers cloud security with Splunk, DevOps, and security operations. Moreover, the book provides practical guidance on best practices for Splunk in cybersecurity, compliance, and regulatory requirements. It concludes with a summary of the key concepts covered throughout the book.

Table of Contents
1. Introduction to Splunk and Cybersecurity
2. Overview of Splunk Architecture
3. Configuring Inputs and Data Sources
4. Data Ingestion and Normalization
5. Understanding SIEM
6. Splunk Enterprise Security
7. Security Intelligence
8. Forensic Investigation in Security Domains
9. Splunk Integration with Other Security Tools
10. Splunk for Compliance and Regulatory Requirements
11. Security Orchestration, Automation and Response (SOAR) with Splunk
12. Cloud Security with Splunk
13. DevOps and Security Operations
14. Best Practices for Splunk in Cybersecurity
15. Conclusion and Summary
Index