資安事件回應、SIEM、SOC 手冊 (Playbook) 快速參考
This digital copy of Incident Response, SIEM, SOC Playbook Quick reference is a handbook for blue team/SOC/Security Team/Digital Forensics and Incident Response (DFIR)
顯示所有 3 個結果
-
特價
-
特價
Splunk 增強附加包
This Splunk enhancement add-on pack provides additional normalization and CIM mapping to the original apps. Those enhancements are based on best practices and therefore can enhance Splunk detection ratio and more effective investigation for SOC team.
-
Splunk 資安偵測規則和儀表板組合
This Splunk Security Detection Correlation Rule and Dashboard pack contain Splunk correlation rule and dashboard developed by our team. All the correlation rules are not overlapped with Splunk Enterprise Security, Splunk Security Essentials, and Splunk ES Content Update.