Who should attend
SOC Analysts.
Prerequisites
To be successful, students should have a working understanding of the topics covered in the following Splunk courses:
- Intro to Splunk (eLearning)
- Using Fields (SUF)
- Visualizations
- Search Under the Hood
- Intro to Knowledge Objects
- Introduction to Dashboards (ITD)
Course Content
This 13.5-hour instructor-led course prepares SOC Analysts to use Splunk Enterprise Security (ES). Students identify and track incidents, analyze security risks, use predictive analytics, and discover threats.
Please note that this course may run over three days, with 4.5 hour sessions each day.