Video Library¶

"The Office" Hours¶

"The Office" Hours is a monthly webinar series that provides a platform for members of the RBA Community to ask questions and get expert insights on risk-based alerting and Splunk Enterprise Security. Hosted by ZachTheSplunker, these sessions are an "ask me anything" format where attendees can submit questions in advance or ask them live during the webinar. Each episode features subject matter experts from the community who are knowledgeable about RBA and willing to share their expertise with attendees. If you’re looking for answers to your questions about RBA, ES, or the RBA Community, “The Office” Hours is the perfect place to get them. If you’re an RBA subject matter expert and would like to be a panelist, please don’t hesitate to contact us!

April 2024: Welcoming Back Haylee Mills, Staff Security Strategist at Splunk

March 2024: Special Guest Speaker: Mauricio Valazco, Principal Threat Researcher at Splunk

February 2024: Special Guest Speaker: Matthew Joseff, Fraud Specialist at Splunk

January 2024: Special Guest Speaker: Christian Cloutier, Creator of the app, SA-DetectionInsights

Breakout Sessions¶

Engineering Risk Rules and Detections¶

Building and Tuning Reliable Signals That Can Be Heard Above the Noise by Alchemy Global Networks

Topics

• Understand best practices for developing, tuning, and implementing detections, Risk Rules, and Risk Incident Rules to enhance cybersecurity and operational effectiveness.
• Learn strategies for reducing Mean Time To Detect (MTTD) and mitigating false positives to improve the efficiency of Security Operations Centers (SOCs).
• Gain insights into establishing robust lifecycle management processes for threat detection, enabling a strong defense against a wide range of cyber threats.

Request Recording

Crafting Detailed Assets and Identities Lookups¶

Hosted by SP6

Topics

• Assets & Identity Basics
• Building Asset & Identity Lookups
• Creating Custom RBA Risk Factors using A&I fields
• Adjusting Risk Scoring using A&I fields
• Q&A

Request Recording

Data Model Mechanic¶

Hosted by Outpost Security

Topics

• Understanding the mechanics of data models and how they are used for RBA and beyond.
• Ensuring that data models are properly configured for optimal performance.
• Optimizing fields and data to improve the accuracy and effectiveness of data models.
• Identifying and onboarding new data sources into existing data models.

Request Recording