Hunting Through the SIEM (W/ Splunk)

Master Defensive Cybersecurity with SCYTHE and Splunk

Join our immersive cybersecurity workshop, where you'll dive into the world of defensive threat hunting using SCYTHE to deploy multi-staged threats and Splunk (SIEM) to track and detect malicious activities. This hands-on experience is designed to enhance your threat detection and incident response skills, arming you with practical tools and techniques to stay ahead of sophisticated cyber threats.

What You'll Learn
Through this workshop, you'll:
🦄 Map malicious activities to the MITRE ATT&CK Matrix: Gain insights into how specific actions relate to well-known tactics and techniques.
🦄 Deploy multi-staged cyber threats: Build the skills to simulate real-world attacks and hunt for them effectively.
🦄 Analyze endpoint logs in Splunk (SIEM): Discover how to extract and use valuable data from Sysmon and Windows logs.
🦄 Create and customize dashboards: Develop your own threat detection dashboards and queries for ongoing monitoring.
🦄 Operationalize detection rules: Learn how to convert threat intel into actionable alerts and queries.