Soaring into the New Year with Splunk

Participants joined Splunk for a SOAR hands-on workshop! The workshop was designed to familiarize participants with how to respond to incidents, manage cases and artifacts, and automate incident response and standard operating procedures. The workshop provided users an opportunity to walk through a real-world scenario and see first-hand how Splunk SOAR can be used from the creation of a notable event to enriching alerts by automatically gathering data, all the way to managing and resolving the incident.

Participants joined us to learn more about:

• A brief overview of SOAR
• SOAR apps and assets
• Incident investigation and automation with actions
• Workbooks (case templates) and case management
• Playbook development for automation of investigation and response
• Automation and orchestration best practices