Documents / links page? Idk, someone needs to make this: Difference between revisions
(Created page with "SPL102 – Splunk >= e|i|f|grep|Select-String DATE: 7DEC2017...") |
(No difference)
|
Latest revision as of 19:06, 14 November 2017
SPL102 – Splunk >= e|i|f|grep|Select-String DATE: 7DEC2017 TIME: 1900-2100 TOPIC: INFOSEC NIGHT: Splunk
SUMMARY: First we'll review my SPL101 course. Next we are going to go deeper into various Splunk functions. Then unleash the power of Splunk with Regular Expressions. Finally tips and tricks for our Splunk CTF.
GOAL: Learn a little more about Splunk and how to create new fields with Regular Expression and filter unwanted data to keep license cost low.
EQUIPMENT: Laptop with Splunk and Developer license.
SKILL LEVEL: Everyone
PRESENTER: JR