Splunk was invited to conduct two exclusive workshops on “Security Investigation with Splunk” and “An Advanced Persistent Threat (APT) Hunting” on 14 and 20 March 2023 respectively for the students taking the EIE1D04 - Cyber Security Essentials and EIE4106 - Network Management and Security subjects. Splunk is a company that produces software for searching, monitoring, and analyzing machine-generated data via a web-style interface. The speakers illustrated the capabilities of the Splunk data platform in searching and correlating multiple data sources for investigating security incidents and threat hunting during the workshops. In the Security Investigation with Splunk Workshop, the participants practiced the creation of a dashboard in just 15 minutes to find out brute force activities, unexpected login sources and web traffic by scanning activities. While in the APT Hunting Workshop, the students were able to discover the kill chain and the attack technique of the bad actor by using Splunk.
