Splunk SIEM Training Tutorials
Dive into a comprehensive 7-hour tutorial series on Splunk SIEM for incident response, log management, threat hunting, and blue team operations. Learn to investigate various cyber threats including Cerber ransomware, advanced persistent threats (APTs), web application attacks like SQL injection and XSS, USB attacks, FTP vulnerabilities, and crypto miners. Explore how to leverage Splunk for analyzing Amazon Web Services (AWS) cloud events, authentication logs, and Microsoft Office macro malware. Gain practical experience with hands-on exercises from TryHackMe's Boss of the SOC challenges, covering topics such as web activity investigation, cloud security, and ransomware analysis, including a focus on Conti ransomware targeting Microsoft Exchange servers.