Splunk conf update#
Splunk conf free#

Other than the alcohol and snacks, I didn’t really need a second round through the vendor hall. Pub Crawl – Similar to the soiree from the previous night, only with craft beer stations and less food overall.

That’s the sort of detailed, technical stuff that I eat up, rather than non-filling high-level statements. While nothing about Splunk and anomalies and hunting were new to me, I really loved the best/worst practices examples.

Threat Hunting and Anomaly Detection with Splunk UBA – I really liked this talk and speaker. While I’m new with Splunk, it’s these hands-on demos and doing actual things with the data that get me excited, rather than high-level, perfect-situation statements. The data itself was used in the BOTS competition the previous evening. As it was, I really enjoyed getting hands-on a bit with some practice data for finding attacks. This session had several hundred people in it, and as such you have to expect them to move on and not wait for anyone, and move on they did! Thankfully, this is the introduction talk for a broader and slower workshop for security people to get from Splunk throughout 2019. Let’s Get Hands-On with Splunk Enterprise Security, Splunk Phantom, and Real Boss of the SOC Data – This was the one “laptop required” talk I attended, and honestly one could have been just fine sitting back and watching along. Thankfully, it was right next to a sandwich distribution station, so I just left with my lunch to eat elsewhere. I was on time getting to this talk, but after about 15 minutes after the start time, we were all still waiting outside the room. Tuesday was the one day where I was all over the grounds for various talks, and required buses to get me places in time, and the buses were still a little chaotic. The diagrams are wonderful (and would be used in several talks I’d see over the course of the con) for designing your security operations around.įind and Seek – Real-time Asset Discovery and Identity Attribution Using Splunk – I didn’t actually see this talk. Security Super Session: Splunk Security Vision and Roadmap – A strong, high-level look at Splunk and using it for security operations. Security Super Session: Splunk Security Vision and Roadmap After the talk, I don’t think the bus crews were ready for the flood of people, and organization broke down pretty hard on one side of the venue, but we all got back in decent time (albeit later than intended due to the overlong keynote). Visionary and Roadmap Keynote + Breakfast – For the morning keynotes, buses took us to ESPN Arena where we picked up breakfast bags before taking seats. I had fun down here, though someone kept turning on music every now and then and it was ridiculously loud. And I will admit, I evaluate vendor booths on three things: 1) whether I know and like them as a product/company and want to say hi, 2) whether I want some of their swag or not (either for me or to give away to others), and 3) whether I want to buy them (and I’m not a purchasing approver, so that’s pretty much no one). Scoped out vendors, splunk experts, projects, and plenty of swag.

Splunk conf free#

Welcome Soiree – This was a neat way to get people to the vendor floor: an evening event with free food and alcohol stations throughout the vendor floor. This is why I like smaller cons over larger vendor ones.) (I’m not a huge drinker or want others to drink, but to me, this still sets a tone and statement for the sort of partially or fully informal a venue may be.

Splunk conf update#

I guess I need to click update notices in the event app! (Come on, I’m in security, I don’t click accept/download buttons unless I have to.) Also, this was the only talk that I attended with a drink-in-hand speaker.

Beyond that, this day was pretty casual until the evening.įirst Timer Orientation talk – This was a nice intro to the con, even though the room was moved and I didn’t hear about it until a co-worker texted me. Goal today was to get registered for the con! The line was super quick, even at 10:30am with the masses to get checked in, get a badge, pick up the backpack/water bottle freebie, and then pick up the freebie hoodie. On the plane, listened to some Darknet Diaries finally finding some time to do some podcasts! Took some time to hit the Boardwalk on the ground and already get sick of the heat and humidity. My goals for this day were just to get to Orlando and settled into the hotel and do some recon of the grounds and environment. The talks and slides are all available online for consumption. That’s pretty impressive! I attended as many talks as I could, and I left pretty happy with the content I consumed. Based on who you ask, the con itself had 7500-9500 attendees in its largest event to date. In thinking back on this, I have to say this is the very first vendor-specific conference I think I’ve ever attended in my 15 years in IT. A week ago I flew down to Orlando, Florida to attend Splunk.