Modernizing InfoSec Training and IT Operations at USF
|
|
|
- Shannon McBride
- 5 years ago
- Views:
Transcription
1 Modernizing InfoSec Training and IT Operations at USF Goodbye Tedious Tasks! A Novel Automation Framework Leveraging Splunk Tim Ip, Senior Security Engineer Nicholas Recchia, Director & Information Security Officer September, 2017 Washington, DC
2 Forward-Looking Statements During the course of this presentation, we may make forward-looking statements regarding future events or the expected performance of the company. We caution you that such statements reflect our current expectations and estimates based on factors currently known to us and that actual events or results could differ materially. For important factors that may cause actual results to differ from those contained in our forward-looking statements, please review our filings with the SEC. The forward-looking statements made in this presentation are being made as of the time and date of its live presentation. If reviewed after its live presentation, this presentation may not contain current or accurate information. We do not assume any obligation to update any forward looking statements we may make. In addition, any information about our roadmap outlines our general product direction and is subject to change at any time without notice. It is for informational purposes only and shall not be incorporated into any contract or other commitment. Splunk undertakes no obligation either to develop the features or functionality described or to include any such feature or functionality in a future release. Splunk, Splunk>, Listen to Your Data, The Engine for Machine Data, Splunk Cloud, Splunk Light and SPL are trademarks and registered trademarks of Splunk Inc. in the United States and other countries. All other brand names, product names, or trademarks belong to their respective owners Splunk Inc. All rights reserved.
3 About Us University of San Francisco (USF) more than 12,000 students, faculty and staff Catholic Jesuit Education
4 About Me Tim Ip Senior Security Engineer Leverages Splunk to automate processes in USF From Hong Kong 2 years ago 10+ years experience in security industry and 6+ years experience on SIEM development Previous worked for a consulting company as a SIEM consultant Primary focus on Security monitoring, process automation and big data analytics Holds a master degree, OSCP, GPEN, CISSP, CISA and CISM GitHub / LinkedIn / Twitter: timip.net
5 About Me Nick Recchia Director & Information Security Officer USF Alumnus 12+ years experience in Information Technology and 8+ years focused on InfoSec with integration Manages the security group and oversee related InfoSec programs Holds doctorate degree in Organization and Leadership, CISSP, PMP, ITILv3, etc. LinkedIn
6 Agenda Our Splunk Journey Ch.1 Background & Context InfoSec training: from manual methods to strategic innovation Ch.2 Course Automation Methodology and technical highlights Ch.3 IT Automation Reuse methodology Key Takeaways Q&A
7 Background & Context InfoSec training: from manual methods to strategic innovation
8 Background: Technology Transformation Manual methods to strategic innovations
9 Background: Technology Transformation Manual methods to strategic innovations? Automation Current State (2015) Future State (2017)
10 Background: Infosec USF Timeline: required security training Splunk POC Splunk (SIEM) ~2007 New employee orientation SANS Security The Human (STH) 2010 Orientation revamped cutting ISO New CIO 2014 ITS Division Re-org 2015 Rebuilt InfoSec Team How? 2016 Security Training Model after Harassment training?
11 Context: Infosec USF Conceptual Development Technology Process Automation People
12 InfoSec Course Context: People, Process and Technology People: InfoSec Team Enrollment (3000 people) << Employee, Faculty & Affiliate Technology: Process: Enrollment? Monitoring progress? Encourage completion?
13 Context: Enrollment High-level: Leverage Existing Process Start date confirmed Banner Enterprise Resource Planning (ERP) Nightly update USF LMS InfoSec Course HR processes new employee into Banner
14 Context: Monitor Progress High-level: Automated Course Alerts & Mgmt. Reports USF LMS InfoSec Course Banner ERP Correlation and Alerting - SIEM
15 Concept: Auto Alerts High-level: Inform, Remind, Escalate
16 Context: Infosec USF Conceptual formula Trusted Partnership Automation Business Intel Splunk Ninja
17 Course Automation
18 Framework Introduction Use Case: InfoSec Course Automation 1. Course Data Input 2. Actions InfoSec Course Automation 3. Intelligence Input 4. Knowledge
19 How to make it happen? Course Data Intelligence Knowledge Actions
20 Data from other systems Infra. Data from external 3 rd party systems User Endpoints SplunkCloud> Splunk Heavy Forwarder On-Premise Search Head Splunk Heavy Forwarder on AWS
21 Data from other systems Infra. Provides: Filtering Compression Encryption Data from external 3 rd party systems User Endpoints SplunkCloud> Splunk Heavy Forwarder On-Premise Search Head Splunk Heavy Forwarder on AWS
22 Data from other systems Infra. SplunkCloud> User Endpoints Data from Provides: external 3 rd party systems Customized Automation Development Environment Splunk Heavy Forwarder On-Premise Search Head Splunk Heavy Forwarder on AWS
23 Architecture Course Data Intelligence Knowledge Actions
24 1. Course Data Input For InfoSec Course
25 Architecture Course Data Intelligence Knowledge Actions
26 Canvas Integration Gradebook History Assignment Submission Enrollments Section User List Ana Student Summaries API CANVAS Raw Data SPL InfoSec Student Status Snapshot Course Assignment
27 Actionable? Canvas Integration Dashboard
28 Ninja Brainstorming We need something more actionable InfoSec Team Division Leads need to access to the data to monitor their staff progress! How to give access to the division leads? Send the information to them an ?
29 Ninja Brainstorming We need something more actionable Report? No! I need to make the more user friendly!
30 2. Actions For InfoSec Course
31 Architecture Course Data Intelligence Knowledge Actions
32 Notification Type of notification To Students: Welcome Reminder Overdue To division leads: Monthly Report Escalation Report
33 Default Alert Notification Not user friendly Lack of enforcement Not Actionable
34 Customized Notifications Goals User friendly Dynamic information from Splunk Flexible and reusable
35 Customized Notification Scheduler Customized Scheduler Search Head Splunk Query Results Scheduler Template Expanding results Replace tokens with query results Loop Send out
36 2017 SPLUNK INC. Customized Notification For Student Reminder, Due Date Approaching and Due Date Overdue Alert All dynamic information from Splunk query Customized Add to Calendar Link
37 2017 SPLUNK INC. Customized Notification For Executive Executive Report Statistics by role Overview and details
38 2017 SPLUNK INC. Customized Notification For Executive Executive Report Statistics by role Overview and details
39
40 Ninja Brainstorming Lack of Enforcement Will students ignore the notification? How to influence the action? Escalate to supervisor! Hmm Where can we get the supervisor information?
41 3. Intelligence Input For InfoSec Course
42 Architecture Course Data Intelligence Knowledge Actions
43 Banner/ServiceNow Splunk Integration ERP Daily Batch Job Banner Raw Data User Inventory SPL ITSM Splunk Apps ServiceNow Raw Data
44 Ingest ERP Data Banner: Escalation Data Employee Supervisor Tim Nick Vince Nick Nick Opinder Michael Nick Opinder Paul Employee Escalation Path Tim Tim, Nick, Opinder, Paul Vince Vince, Nick, Opinder, Paul Nick Nick, Opinder, Paul Michael Michael, Nick, Opinder, Paul Opinder Opinder, Paul
45 Ingest ITSM data ServiceNow: User Profile Roles Department
46 4. Knowledge For InfoSec Course
47 Architecture Course Data Intelligence Knowledge Actions
48 Business Logic From complex business requirements and SPL queries Day 1 Welcome (Employee) Day 10 Courtesy Reminder (Employee) Day 30 Manager Escalation (Employee, Supervisor and Manager) We will listed on department head escalation report. Course Completed If user completed the course, they will receive a congratulation . (Employee) Day 27 Due Date Approaching (Employee and Supervisor)
49 Knowledge Ninja Experience/Skills Business Knowledge Splunk SPL Query / dashboard/ automation
50 SPL Queries ServiceNow Raw Data Banner Raw Data CANVAS Raw Data SPL User Inventory SPL InfoSec Course Student Status Snapshot SPL SPL Dashboards s
51 Results InfoSec Course
52 Use Case For supporting InfoSec Course Automation 1. Machine Data Enrollment Score Assignment InfoSec Course Automation 2. Actions Customized Notification Scheduler 3. Intelligence ServiceNow: User Inventory Banner: Escalation Path 4. Knowledge Business Logic Splunk Ninja Splunk SPL Query
53 Normal Notification Notification vs Completion
54 Management Escalation Notification vs Completion
55 Course Data Actions Intelligence Knowledge }InfoSec Course Automation
56 Machine Data Adaptive Responses Intelligence Knowledge }IT InfoSec Course Automation
57 IT Automation
58 USF Automation Framework Machine Data OS/Application Log App from Splunkbase Customized API Adaptive Responses Self-Service Notification ServiceNow Ticket Creation Automation Framework Intelligence CMDB User Profile Escalation Path Knowledge Business Logic Splunk Ninja Splunk SPL Queries
59 Intelligence Inputs External Splunkbase e.g.: Splunk Add-on for Facebook ThreatExchange Customized Threat Intelligence Download Internal User Inventory (Human) CMDB (Machine)
60 Adaptive Responses Human Severity Students Faculty Customized ServiceNow Ticket Employee/ Affiliate Customized ServiceNow Ticket Slack Channel
61 Adaptive Response Self Service Notification
62 Adaptive Responses Next Step: Human + Machine Students Faculty Customized ServiceNow Ticket Employee/ Affiliate Customized ServiceNow Ticket Slack Channel Machine Trigger Antivirus Full Scan Apply new IP blocking firewall rule And more
63 Knowledge Ninja Experience Business Requirements Splunk SPL Query
64 Expanding Use Cases Increase automation to IT Machine Data Input Intelligence Input Adaptive Response Knowledge InfoSec Course Automation Canvas Banner / ServiceNow Splunk Ninja + Business Intel PCI Password Expired Notification Domain Controller User List ServiceNow User Profile Splunk Ninja + Business Intel PCI Anti-Virus Problem Notification Sophos Log ServiceNow CMDB / ServiceNow Ticket Splunk Ninja + Business Intel
65 2017 SPLUNK INC. People: Trusted partnership - business intel/company culture & Splunk Ninja skills Key Takeaways Technology Splunk - reuse valuable data for various use cases security, IT operations, beyond Process Transition data/business intelligence in to queries/actions Automation: Turn data/intelligence into answers and/or actions
66 Q&A Tim Ip Senior Security Engineer Nicholas Recchia Director & Information Security Office
67 2017 SPLUNK INC. Thank You Don't forget to rate this session in the.conf2017 mobile app
FFIEC Cybersecurity Assessment Tool
FFIEC Cybersecurity Assessment Tool Cybersecurity Controls & Incidence Mappings for Splunk Enterprise, Enterprise Security, User Behavior Analytics Curtis Johnson Senior Sales Engineer & Security SME September
Measuring HEC Performance For Fun and Profit
Measuring HEC Performance For Fun and Profit Itay Neeman Director, Engineering, Splunk Clif Gordon Principal Software Engineer, Splunk September 2017 Washington, DC Forward-Looking Statements During the
Next Generation Dashboards
Next Generation Dashboards Stephen Luedtke Sr. Technical Marketing Manager September 27, 2017 Washington, DC Forward-Looking Statements During the course of this presentation, we may make forward-looking
The Power of Data Normalization. A look at the Common Information Model
The Power of Data Normalization A look at the Common Information Model Mark Bonsack, CISSP Vladimir Skoryk, CISSP, CCFE, CHFI, CISA, CISM, RGTT Staff Sales Engineer, Splunk PS Supreme Architect, Splunk
DB Connect Is Back. and it is better than ever. Tyler Muth Denis Vergnes. September 2017 Washington, DC
DB Connect Is Back and it is better than ever Tyler Muth Denis Vergnes September 2017 Washington, DC Forward-Looking Statements During the course of this presentation, we may make forward-looking statements
Create Dashboards that People Love
Create Dashboards that People Love Introducing Splunk Dashboard Design Guidelines Iryna Vogler User Experience Design September 26, 2017 Washington, DC Forward-Looking Statements During the course of this
Running Splunk Enterprise within Docker
Running Splunk Enterprise within Docker Michael Clayfield Partner Consultant 03/09/2017 1.1 Forward-Looking Statements During the course of this presentation, we may make forward-looking statements regarding
Data Obfuscation and Field Protection in Splunk
Data Obfuscation and Field Protection in Splunk Angelo Brancato Security Specialist Dirk Nitschke Senior Sales Engineer 28 September 2017 Washington, DC 2017 SPLUNK INC. Agenda Protect Your Machine Data
Dashboard Time Selection
Dashboard Time Selection Balancing flexibility with a series of system-crushing searches Chuck Gilbert Analyst, chuck_gilbert@comcast.com September 2017 Washington, DC Forward-Looking Statements During
Docker and Splunk Development
Docker and Splunk Development Empowering Splunk Development with Docker Ron Cooper & David Kraemer Booz Allen Hamilton 26 September 2017 Washington, DC Forward-Looking Statements During the course of this
Splunk & AWS. Gain real-time insights from your data at scale. Ray Zhu Product Manager, AWS Elias Haddad Product Manager, Splunk
Splunk & AWS Gain real-time insights from your data at scale Ray Zhu Product Manager, AWS Elias Haddad Product Manager, Splunk Forward-Looking Statements During the course of this presentation, we may
Data Onboarding. Where Do I begin? Luke Netto Senior Professional Services Splunk. September 26, 2017 Washington, DC
Data Onboarding Where Do I begin? Luke Netto Senior Professional Services Consultant @ Splunk September 26, 2017 Washington, DC Forward-Looking Statements During the course of this presentation, we may
Essentials to creating your own Security Posture using Splunk Enterprise
Essentials to creating your own Security Posture using Splunk Enterprise Using Splunk to maximize the efficiency and effectiveness of the SOC / IR Richard W. McKee, MS-ISA, CISSP Principal Cyber Security
Atlassian s Journey Into Splunk
Atlassian s Journey Into Splunk The Building Of Our Logging Pipeline On AWS Tim Clancy Engineering Manager, Observability James Mackie Infrastructure Engineer, Observability September 2017 Washington,
Dragons and Splunk Do Not Do Well In Captivity
Dragons and Splunk Do Not Do Well In Captivity Tame Splunk Dragons Before Winter Comes Kyle Prins & Keith Quebodeaux DellEMC Splunk Ninjas September 2017 Washington, DC Forward-Looking Statements During
Building a Threat-Based Cyber Team
Building a Threat-Based Cyber Team Anthony Talamantes Manager, Defensive Cyber Operations Todd Kight Lead Cyber Threat Analyst Sep 26, 2017 Washington, DC Forward-Looking Statements During the course of
Need for Speed: Unleashing the Power of SecOps with Adaptive Response. Malhar Shah CEO, Crest Data Systems Meera Shankar Alliance Manager, Splunk
Need for Speed: Unleashing the Power of SecOps with Adaptive Response Malhar Shah CEO, Crest Data Systems Meera Shankar Alliance Manager, Splunk September 27, 2017 Washington, DC Forward-Looking Statements
Making the Most of the Splunk Scheduler
Making the Most of the Splunk Scheduler Paul J. Lucas Principal Software Engineer, Splunk September 25 28, 2017 Washington, DC Forward-Looking Statements During the course of this presentation, we may
Using Splunk Enterprise To Optimize Tailored Long-term Data Retention
Using Splunk Enterprise To Optimize Tailored Long-term Data Retention Tomasz Bania Incident Response Lead, Dolby Eric Krieser Splunk Professional Services September 2017 Washington, DC Forward-Looking
Dashboards & Visualizations: What s New
Dashboards & Visualizations: What s New Nicholas Filippi Product Management, Splunk Patrick Ogdin Product Management, Splunk September 2017 Washington, DC Welcome Patrick Ogdin Product Management, Splunk
Architecting Splunk For High Availability And Disaster Recovery
Architecting Splunk For High Availability And Disaster Recovery Sean Delaney Principal Architect, Splunk September 2017 Washington, DC Forward-Looking Statements During the course of this presentation,
Scaling Indexer Clustering
Scaling Indexer Clustering 5 Million Unique Buckets and Beyond Cher-Hung Chang Principal Software Engineer Tameem Anwar Software Engineer 09/26/2017 Washington, DC Forward-Looking Statements During the
Dashboard Wizardry. Advanced Dashboard Interactivity. Siegfried Puchbauer Principal Software Engineer Yuxiang Kou Software Engineer
Dashboard Wizardry Advanced Dashboard Interactivity Siegfried Puchbauer Principal Software Engineer Yuxiang Kou Software Engineer September 25, 2017 Washington, DC Brought To You By Siegfried Puchbauer
Bring Context To Your Machine Data With Hadoop, RDBMS & Splunk
Bring Context To Your Machine Data With Hadoop, RDBMS & Splunk Raanan Dagan and Rohit Pujari September 25, 2017 Washington, DC Forward-Looking Statements During the course of this presentation, we may
Visualizing the Health of Your Mobile App
Visualizing the Health of Your Mobile App Jay Tamboli ios Engineer, Capital One September 26, 2017 Washington, DC Forward-Looking Statements During the course of this presentation, we may make forward-looking
Metrics Analysis with the Splunk Platform
Metrics Analysis with the Splunk Platform How to work with metrics for Monitoring, Alerting, and ad-hoc analysis at scale Michael Porath Product Management, Splunk Allan Yan Principal Software Engineer,
A Trip Through The Splunk Data Ingestion And Retrieval Pipeline
A Trip Through The Splunk Data Ingestion And Retrieval Pipeline Harold Murn Senior Systems Engineer 2017-09-27 Washington, DC Forward-Looking Statements During the course of this presentation, we may make
Indexer Clustering Internals & Performance
Indexer Clustering Internals & Performance Da Xu Chloe Yeung September 28, 2017 Washington, DC Forward-Looking Statements During the course of this presentation, we may make forward-looking statements
Indexer Clustering Fixups
Indexer Clustering Fixups Cluster recovery process Da Xu Engineering Splunk Forward-Looking Statements During the course of this presentation, we may make forward-looking statements regarding future events
Monitoring Docker Containers with Splunk
Monitoring Docker Containers with Splunk Marc Chéné Product Manager Sept 27, 2017 Washington, DC Forward-Looking Statements During the course of this presentation, we may make forward-looking statements
Squeezing all the Juice out of Splunk Enterprise Security
Squeezing all the Juice out of Splunk Enterprise Security Marquis Montgomery, CISSP Sr. Staff Security Consultant, Splunk Jae Jung Professional Services Consultant, Splunk September 23 25, 2017 Washington,
Manage AWS Services. Cost, Security, Best Practice and Troubleshooting. Principal Software Engineer. September 2017 Washington, DC
Manage AWS Services Cost, Security, Best Practice and Troubleshooting Elias Haddad Peter Chen Principal Product Manager Principal Software Engineer September 2017 Washington, DC Agenda Challenges in Managing
One Hospital s Cybersecurity Journey
MAY 11 12, 2017 SAN FRANCISCO, CA One Hospital s Cybersecurity Journey SanFrancisco.HealthPrivacyForum.com #HITprivacy Introduction Senior Director Information Systems Technology, Children s Mercy Hospital
Introducing Splunk Validated Architectures (SVA)
Introducing Splunk Validated Architectures (SVA) Optimizing Your Path To Success With Splunk Sean Delaney Principal Architect Stefan Sievert Staff Architect September 2017 Washington, DC Forward-Looking
itsm003 v.3.0 NISTCSF.COM NICE Training Curriculum & Workforce Planning Program
itsm003 v.3.0 NICE Training Curriculum & Workforce Planning Program Agenda and Objectives NICE Cybersecurity Curriculum Consortium IT & Cybersecurity Frameworks & Methodologies NICE Curriculum Catalog
SOFTWARE DEMONSTRATION
SOFTWARE DEMONSTRATION IDENTITY AND ACCESS MANAGEMENT SOFTWARE AND SERVICES RFP 644456 DEMONSTRATION AGENDA Executive Summary Technical Overview Break User Interfaces and Experience Multi-Campus and Inter-Campus
Search Head Clustering Basics To Best Practices
Search Head Clustering Basics To Best Practices Bharath Aleti Product Manager, Splunk Manu Jose Sr. Software Engineer, Splunk September 2017 Washington, DC Forward-Looking Statements During the course
Splunking Your z/os Mainframe Introducing Syncsort Ironstream
Copyright 2016 Splunk Inc. Splunking Your z/os Mainframe Introducing Syncsort Ironstream Ed Hallock Director of Product Management, Syncsort Inc. Disclaimer During the course of this presentation, we may
Best Practices and Better Practices for Users
Best Practices and Better Practices for Users while you get settled Latest Slides: https://splunk.box.com/v/blueprints-practices-user Collaborate: #bestpractices Sign Up @ http://splk.it/slack Load Feedback
Splunk N Box. Splunk Multi-Site Clusters In 20 Minutes or Less! Mohamad Hassan Sales Engineer. 9/25/2017 Washington, DC
Splunk N Box Splunk Multi-Site Clusters In 20 Minutes or Less! Mohamad Hassan Sales Engineer 9/25/2017 Washington, DC Forward-Looking Statements During the course of this presentation, we may make forward-looking
Cloud is the 'Only' Way Forward in Information Security. Leveraging Scale to Make the Unknown Known, in Dev, Sec & Ops.
George Gerchow, Sumo Logic Chief Information Security Officer Cloud is the 'Only' Way Forward in Information Security. Leveraging Scale to Make the Unknown Known, in Dev, Sec & Ops. Agenda Sumo Security
Bringing Sweetness to Sour Patch Tuesday
Bringing Sweetness to Sour Patch Tuesday Pacific Northwest National Laboratory Justin Brown & Arzu Gosney September 27, 2017 Washington, DC Forward-Looking Statements During the course of this presentation,
itsm003 v.3.0 DxCERTS IT & NIST Cybersecurity Digital Transformation (Dx) Enterprise Training Curriculum
itsm003 v.3.0 DxCERTS IT & NIST Cybersecurity Digital Transformation (Dx) Enterprise Training Curriculum Agenda and Objectives The Digital Transformation (Dx) Problem NISTCSF.COM Cybersecurity Curriculum
Click to edit Master title style. DIY vs. Managed SIEM
DIY vs. Managed SIEM Meet Paul Paul Caiazzo Principal, Chief Security Architect CISSP, CISA, CEH M.S. Information Security and Assurance 15+ years of experience in Information Security Connect with me:
Tracking Logs at Zillow with Lookups & JIRA
Tracking Logs at Zillow with Lookups & JIRA Seth Thomas, Jon Wentworth September 27 Washington, DC Forward-Looking Statements During the course of this presentation, we may make forward-looking statements
Extending SPL with Custom Search Commands
Extending SPL with Custom Search Commands Jacob Leverich Director of Engineering 2017/08/11 Washington, DC Forward-Looking Statements During the course of this presentation, we may make forward-looking
Making Sense of Web Fraud With Splunk Stream
Making Sense of Web Fraud With Splunk Stream An in-depth look at Stream use cases and customer success stories with a focus on stream:http Jim Apger Minister of Mayhem Senior Security Architect Matthew
Integrating Splunk And AWS Lambda
Integrating Splunk And AWS Lambda Big Results @ Fast-Food Prices Gary Mikula Senior Director, Cyber & Information Security Siddhartha Dadana Lead Security Engineer Kuljeet Singh Lead Security Engineer
Splunking with Multiple Personalities
Splunking with Multiple Personalities Extending Role Based Access Control to achieve fine grain security of your data Sabrina Lea Senior Sales Engineer, Splunk Shaun C Splunk Customer September 2017 Forward-Looking
Splunk For Google Analytics
Copyright 2016 Splunk Inc. Splunk For Google Analytics Charles Adriaenssens, Business Analytics Lead Rory Blake, Staff PS Consultant Disclaimer During the course of this presentation, we may make forward
Building an Effective Cloud Operating Model on AWS
Building an Effective Cloud Operating Model on AWS Jeff Armstrong (Cloud Architect, Cloudreach) 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Introductions Cloud Operating Model
Welcome to Tomorrow... Today
Copyright 2016 Splunk Inc. Welcome to Tomorrow... Today The need and benefit of merging of IT and Security in today's ever connected world of security and IT Tim Lee CISO, City of LA Ernie Welch Sales
The IT Search Company
The IT Search Company PCI for Splunk @ Gala Coral Peter Bassill CISO Gala Coral Group The IT Search Company 2 Splunk Inc. 2010 Agenda My 2 minutes of Fame Who is Gala Overview of IT @ Gala What is PCI
DATA INTEGRATION PLATFORM CLOUD. Experience Powerful Data Integration in the Cloud
DATA INTEGRATION PLATFORM CLOUD Experience Powerful Integration in the Want a unified, powerful, data-driven solution for all your data integration needs? Oracle Integration simplifies your data integration
Building Your First Splunk App with the Splunk Web Framework
Copyright 2013 Splunk Inc. Building Your First Splunk App with the Splunk Web Framework Itay Neeman Dev Manager, Splunk Sea@le #splunkconf Legal NoMces During the course of this presentamon, we may make
Annexure 08 (Profile of the Project Team)
Annexure 08 (Profile of the Project Team) 1. Project Director (1) 2. Transition / Delivery Manager (1) 3. Project Manager Software (1) 4. Project Manager SLA (1) 5. Project Manager Information Security
Data Management and Security in the GDPR Era
Data Management and Security in the GDPR Era Franck Hourdin; Vice President, EMEA Security Russ Lowenthal; Director, Database Security Product Management Mike Turner; Chief Operating Officer, Capgemini
RSA Advanced Security Operations Richard Nichols, Director EMEA. Copyright 2015 EMC Corporation. All rights reserved. 1
RSA Advanced Security Operations Richard Nichols, Director EMEA 1 What is the problem we need to solve? 2 Attackers Are Outpacing Defenders..and the Gap is Widening Attacker Capabilities The defender-detection
ISE North America Leadership Summit and Awards
ISE North America Leadership Summit and Awards November 6-7, 2013 Presentation Title: Presenter: Presenter Title: Company Name: Embracing Cyber Security for Top-to-Bottom Results Larry Wilson Chief Information
A Risk Management Platform
A Risk Management Platform Michael Lai CISSP, CISA, MBA, MSc, BEng(hons) Territory Manager & Senior Security Sales Engineer Shift to Risk-Based Security OLD MODEL: Prevention-Based Security Prevention
Goal 1: Maintain Security of ITS Enterprise Systems
INFORMATION TECHNOLOGY SERVICES University Technology Administration, Infrastructure and Support Open Systems Infrastructure Calendar Year 2018 Overview The primary mission of Open Systems Infrastructure
USE CASE IN ACTION Splunk + Komand
USE CASE IN ACTION Splunk + Komand USE CASE IN ACTION - SPLUNK + KOMAND - 1 Automating response to endpoint threats using using Sysdig Falco, Splunk, Duo, and Komand Many security teams use endpoint threat
Presented by Max Fritz Senior Systems Consultant, Now Micro. Office 365 for Education What to Use When
Presented by Max Fritz Senior Systems Consultant, Now Micro Office 365 for Education What to Use When Max Fritz Senior Systems Consultant MCSA Office 365, MCSE Productivity Founder of Minnesota Office
Goal 1: Maintain Security of ITS Enterprise Systems
INFORMATION TECHNOLOGY SERVICES University Technology Administration, Infrastructure and Support Open Systems Infrastructure Calendar Year 2018 Overview The primary mission of Open Systems Infrastructure
The Resilient Incident Response Platform
The Resilient Incident Response Platform Accelerate Your Response with the Industry s Most Advanced, Battle-Tested Platform for Incident Response Orchestration The Resilient Incident Response Platform
Office of Information Technology Strategic Plan Last Update
Telecom Service Implement Calero Billing Automation System Phase II Fiber Air core cable Replacement VoIP proposal and determination of funding source Phase II Fiber VoIP East Campus Phase III Fiber VoIP
NETWRIX PASSWORD EXPIRATION NOTIFIER
NETWRIX PASSWORD EXPIRATION NOTIFIER ADMINISTRATOR S GUIDE Product Version: 3.3 January 2013 Legal Notice The information in this publication is furnished for information use only, and does not constitute
Enterprise Security Biology
Enterprise Security Biology Dissecting the Threat Intelligence Framework John Stoner Staff Security Architect US Public Sector and then some September 2017 Forward-Looking Statements During the course
What It Takes to be a CISO in 2017
What It Takes to be a CISO in 2017 Doug Copley Deputy CISO Sr. Security & Privacy Strategist February 2017 IMAGINE You re the CISO In Bangladesh Of a bank On a Friday when you re closed You realize 6 huge
An Overview. Version Quadient Group AG Quadient Group AG https://www.quadient.com/documentation
An Overview Version 12.0 Quadient Group AG 2018 Quadient Group AG https://www.quadient.com/documentation Quadient Cloud R12 An Overview Product version 12.0 Document version 12.0.0.3 Release date: April
Customer s journey into the private cloud with Cisco Enterprise Cloud Suite
Customer s journey into the private cloud with Cisco Enterprise Cloud Suite Peter Charpentier, Senior Solution Architect, Cisco AS Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker
Forescout. eyeextend for ServiceNow. Configuration Guide. Version 2.0
Forescout Version 2.0 Contact Information Forescout Technologies, Inc. 190 West Tasman Drive San Jose, CA 95134 USA https://www.forescout.com/support/ Toll-Free (US): 1.866.377.8771 Tel (Intl): 1.408.213.3191
Hitachi NEXT 2018 Automating Service Maintenance with Hitachi Automation Director (HAD)
Hitachi NEXT 2018 Automating Service Maintenance with Hitachi Automation Director (HAD) Contents Lab 1 Submitting Your First HAD Service Lab 2 Extending Service Capabilities with Service Builder Lab 3
Search Language - Beginner Mitch Fleischman
Copyright 2013 Splunk Inc. Search Language - Beginner Mitch Fleischman Senior Instructor #splunkconf Legal NoDces During the course of this presentadon, we may make forward- looking statements regarding
itsm003 v.3.0 NISTCSF.COM Role-Based IT & NIST Cybersecurity Curriculum Solutions
itsm003 v.3.0 NISTCSF.COM Role-Based IT & NIST Cybersecurity Curriculum Solutions Agenda and Objectives NISTCSF.COM Curriculum Consortium IT & NIST Cybersecurity Frameworks & Methodologies NISTCSF.COM
Technology Risk Management in Banking Industry. Rocky Cheng General Manager, Information Technology, Bank of China (Hong Kong) Limited
Technology Risk Management in Banking Industry Rocky Cheng General Manager, Information Technology, Bank of China (Hong Kong) Limited Change in Threat Landscape 2 Problem & Threats faced by Banking Industry
Case Management Implementation Guide
Case Management Implementation Guide Salesforce, Winter 18 @salesforcedocs Last updated: November 30, 2017 Copyright 2000 2017 salesforce.com, inc. All rights reserved. Salesforce is a registered trademark
THE UNIVERSITY OF TEXAS-PAN AMERICAN OFFICE OF AUDITS & CONSULTING SERVICES. Computer Administrative Rights Report No
THE UNIVERSITY OF TEXAS-PAN AMERICAN OFFICE OF AUDITS & CONSULTING SERVICES Report No. 15-14 OFFICE OF INTERNAL AUDITS THE UNIVERSITY OF TEXAS - PAN AMERICAN 1201 West University Drive Edinburg, Texas
Goal 1: Maintain Security of ITS Enterprise Systems
INFORMATION TECHNOLOGY SERVICES University Technology Administration, Infrastructure and Support Open Systems Infrastructure Calendar Year 2019 Overview The primary mission of Open Systems Infrastructure
Tanium Connect User Guide. Version 4.8.3
Tanium Connect User Guide Version 4.8.3 September 11, 2018 The information in this document is subject to change without notice. Further, the information provided in this document is provided as is and
From the eyes of a customer
From the eyes of a customer Customer Success Panel Aneel Jaeel SVP Customer Success Group, McAfee Speaker Aneel Jaeel Senior Vice President Customer Success Group McAfee Speakers Major General Chartchai
ITSM Training for Field Service
itsm@harvard.edu May 2013 ITSM Training for Field Service Incident & Request Management with ServiceNow (ServiceNow Training for Field Service Version 1) Agenda Introduction Identifying & Logging Categorizing
The Now Platform Reference Guide
The Now Platform Reference Guide A tour of key features and functionality START Introducing the Now Platform Digitize your business with intelligent apps The Now Platform is an application Platform-as-a-Service
Compare Security Analytics Solutions
Compare Security Analytics Solutions Learn how Cisco Stealthwatch compares with other security analytics products. This solution scales easily, giving you visibility across the entire network. Stealthwatch
GEARS + CounterACT. Advanced Compliance Enforcement for Healthcare. December 16, Presented by:
Advanced Compliance Enforcement for Healthcare Presented by: December 16, 2014 Adam Winn GEARS Product Manager OPSWAT Kevin Mayer Product Manager ForeScout Agenda Challenges for the healthcare industry
Three Key Challenges Facing ISPs and Their Enterprise Clients
Three Key Challenges Facing ISPs and Their Enterprise Clients GRC, enterprise services, and ever-evolving hybrid infrastructures are all dynamic and significant challenges to the ISP s enterprise clients.
THE ART OF SECURING 100 PRODUCTS. Nir
THE ART OF SECURING 100 PRODUCTS Nir Valtman @ValtmaNir I work for as the Application Security 1st time speaking publicly, except at Mmmm OH, AND Neither of my previous startups succeeded!
Cyber Security Risk Management and Identity Theft
Cyber Security Risk Management and Identity Theft 2017 MD SHRM State Conference Presented by Robert Bob Olsen, Chief Executive Officer MS ITS, MBA, CISSP, CISM October 16, 2017 This presentation may not
SALARY $ $72.54 Hourly $3, $5, Biweekly $8, $12, Monthly $103, $150, Annually
SALARY $49.72 - $72.54 Hourly $3,977.88 - $5,803.27 Biweekly $8,618.75 - $12,573.75 Monthly $103,425.00 - $150,885.00 Annually ISSUE DATE: 03/21/18 THE POSITION DIRECTOR OF CYBER SECURITY OPEN TO THE PUBLIC
ForeScout Extended Module for Splunk
Enterprise Strategy Group Getting to the bigger truth. ESG Lab Review ForeScout Extended Module for Splunk Date: May 2017 Author: Tony Palmer, Senior Lab Analyst Abstract This report provides a first look
ISO STANDARD IMPLEMENTATION AND TECHNOLOGY CONSOLIDATION
ISO STANDARD IMPLEMENTATION AND TECHNOLOGY CONSOLIDATION Cathy Bates Senior Consultant, Vantage Technology Consulting Group January 30, 2018 Campus Orientation Initiative and Project Orientation Project
itsm003 v.3.0 DxCERTS IT & NIST Cybersecurity Workforce Development Training Curriculum & Management Program
itsm003 v.3.0 DxCERTS IT & NIST Cybersecurity Workforce Development Training Curriculum & Management Program Agenda and Objectives The Digital Transformation (Dx) Problem NISTCSF.COM Cybersecurity Curriculum
EXTENDING BEHAVIORAL INSIGHTS INTO RISK-ADAPTIVE PROTECTION & ENFORCEMENT
SESSION ID: SPO1-T10 EXTENDING BEHAVIORAL INSIGHTS INTO RISK-ADAPTIVE PROTECTION & ENFORCEMENT Guy Filippelli Vice President of User and Data Security Solutions Forcepoint Meerah Rajavel Chief Information
Now Platform Technology Deep Dive
Now Platform Technology Deep Dive Dragan Preocanin APJ Platform Innovation Team Lead ServiceNow Dylan Lindgren APJ Platform Innovation Team Senior UI Developer ServiceNow 1 Safe Harbor This presentation
USM Anywhere AlienApps Guide
USM Anywhere AlienApps Guide Updated April 23, 2018 Copyright 2018 AlienVault. All rights reserved. AlienVault, AlienApp, AlienApps, AlienVault OSSIM, Open Threat Exchange, OTX, Unified Security Management,
VMware vcloud Air SOC 1 Control Matrix
VMware vcloud Air SOC 1 Control Objectives/Activities Matrix VMware vcloud Air goes to great lengths to ensure the security and availability of vcloud Air services. In this effort, we have undergone a
SECURITY AUTOMATION BEST PRACTICES. A Guide to Making Your Security Team Successful with Automation
SECURITY AUTOMATION BEST PRACTICES A Guide to Making Your Security Team Successful with Automation TABLE OF CONTENTS Introduction 3 What Is Security Automation? 3 Security Automation: A Tough Nut to Crack
Cloud & DevOps April Big Group. April 24, 2015 Friday 1:30-2:30 p.m. Science Center Hall E
Cloud & DevOps April Big Group April 24, 2015 Friday 1:30-2:30 p.m. Science Center Hall E Agenda Program Update Megan Parmar (10 min) News and Announcements Cloud & DevOps Open House: The Results Network
Security Automation Best Practices
WHITEPAPER Security Automation Best Practices A guide to making your security team successful with automation TABLE OF CONTENTS Introduction 3 What Is Security Automation? 3 Security Automation: A Tough
How to Troubleshoot Databases and Exadata Using Oracle Log Analytics
How to Troubleshoot Databases and Exadata Using Oracle Log Analytics Nima Haddadkaveh Director, Product Management Oracle Management Cloud October, 2018 Copyright 2018, Oracle and/or its affiliates. All