7/24/2019 Conf2014 FredWilmot Splunk Security (2)

1/35

8%9: ;&1 ?1"@A1 0962%

D%A: E&3:"F A747A7 0

?1"@A1 0962%&)$ 0)%A)9'

H(%9A) 53)911&

0H5J A3: 0)"3D%9A4 K"2% 8"

7/24/2019 Conf2014 FredWilmot Splunk Security (2)

2/35

=&G61A& A3$ &3L"%

7/24/2019 Conf2014 FredWilmot Splunk Security (2)

3/35

8%9: ;&1 ?1"@A1 0962%&)$ B%A6CWL%9:V0962%&)$6XA%YZG#123476"/?Y

="F31"A: 0#1&69 A3: #1A$ F&)( &)w H911 2G F(A) $"2 FA3) A

$"2 FA3) 0#1&69 "% 5g!G )" &3)9%"#9%A)9 F&)( $"2% :A)A7

?9) A :9

7/24/2019 Conf2014 FredWilmot Splunk Security (2)

34/35

02

7/24/2019 Conf2014 FredWilmot Splunk Security (2)

35/35

Hh_r~ 29GC"