Team Splunk
Advanced APT Hunting with Splunk is a modular, hands-on workshop designed to provide a deeper dive into an Advanced Persistent Threat while providing an opportunity for participants to develop hypotheses and hunt. This workshop leverages Splunk and Enterprise Security and introduces how models like the Lockheed Martin Kill Chain, MITRE ATT&CK and Diamond Model can be used to contextualize their hunts. The workshop leverages the popular Boss of the SOC (BOTS) v5 dataset. Users will leave with a better understanding of how Splunk can be used to hunt for threats within their enterprise.