Splunk Enterprise Security Health Check
By:
BlueVoyant
This service provides a deep dive into the Splunk Enterprise Security Frameworks and Splunk best practices through technical analysis and personnel interviews. If Splunk and/or Enterprise Security is at the the helm of your cybersecurity Cybersecurity Operations Center, this assessment is tailored to help you understand how you can gain more operational value out of your existing investment and drive the specific outcomes that you seek with Splunk Enterprise Security.
Overview
BlueVoyant's ES Health Check helps maximize your Splunk ES investment. BlueVoyant’s Splunk Enterprise Security Health Check helps optimize your environment within Splunk Enterprise Security. This is a scoped workshop.
Deliverables:
Evaluate your current operational state, reviewing and aligning on the five essential characteristics needed for a successful analytics-driven SOCs:
- Threat intelligence
- Advanced analytics
- Automation
- Proactively hunt and investigate
- Adopt an adaptive security architecture
Assess your Splunk ES configuration, governance, and implementation according to Splunk best practices with benchmarking that provides specific areas for optimization for the Splunk tool
Map correlation searches to the MITRE framework to ensure complete coverage and provide feedback regarding search efficiency
Use Case Development Lifecycle and Splunk CIM Compliance – verifies content is being efficiently built and documented in accordance with Splunk best practices to ensure maximum value
| Sold by | BlueVoyant |
| Categories | |
| Fulfillment method | Professional Services |
Pricing Information
This service is priced based on the scope of your request. Please contact seller for pricing details.
Support
Please contact splunk@bluevoyant.com for additional questions, or support.
Service Description available upon request