Beware that which lives amongst the Clouds. Or, ya know, just attack them mercilessly. One of the best parts about having such talented security pros at Splunk, is they also make amazing products. And some are even free. Enter the Cloud Attack Range, a detection development platform written/maintained by Splunkers Jose Hernandez and Mike Haag and open-sourced to everyone. Joining us will be Co-Founder of Red Canary Keith McCammon. Red Canary integrates with Attack Cloud to help generate attack data. It’s a true community project and we’re going to chat about it.

It’s long since been established that it’s not if a breach will occur in your enterprise, it’s when. Are you prepared for that response? As Dave Kennedy, CEO of TrustedSec once asked a Brrcon audience, “If all you had was Sysmon, could you still do a successful IR?” Best practices are only best if you actually practice them. Along with Robert Wagner, Staff Security Specialist at Splunk, we’ll talk about ways to get your teams to their fighting weight when the bad guys sneak in through the basement.

Open source projects are a powerful way to accelerate application development. Open source as a support function to monitoring can help support standards and better Observability and Monitoring practices. Learn about the OpenTelemetry project as a tool to improve the quality and flexibility of traces, spans, logs for better monitoring and Observability practices.

With the Smart ITSI Insights App for Splunk, you can apply a number of techniques to get the most out of ITSI using machine learning.

Splunk SOAR Playbooks - AWS IAM Find and Disable Inactive Users.

The Amazon Connect App for Splunk uses a variety of data sources to help gain insight into your contact center performance both historically and in real-time. In standard Splunk fashion, data is democratized so from DevOps and AppDev teams, to Network and Service Operations Centers, to Contact Center Operations, to Engineering and Capacity Management, there’s something in the app for everyone.

The software delivery chain (SDLC) is the application of applications. If it is not running, you cannot ship code. In this episode of Dissecting DevOps, Dave and Chris cover how you Operate, Measure, and Audit your SDLC to ensure that your organization has Code-To-Cloud Visibility. Because the SDLC is an app for apps, treat it as you would any other application.