Splunk creates security nerve centre with behaviour analytics

Splunk Enterprise Security 4.0 and Splunk UBA will be available by 31st October. Splunk has introduced a new version of Splunk App for Enterprise Security, in addition to announcing a new cyber attacks detection tool named Splunk User Behavior Analytics (UBA). The 4.0 version of Splunk App for Enterprise Security is capable of tracing the attackers’ steps through streamlined ad hoc analysis and event sequencing. The new app has improved breach detection and response, which allows users to tackle multi-stage attacks. It features ‘Investigator Journal’ that can keep track of ad hoc searches and activities in order to streamline analysis of multi-stage attacks associated with breach detection and response. The app also includes ‘Investigator Timeline’, which allows individuals to apply the kill chain within the timeline during investigations, with the…


Link to Full Article: Splunk creates security nerve centre with behaviour analytics