Splunk Certified Cybersecurity Defense Engineer

An engineer has discovered that an acquired company uses a duplicate IP address space. Which feature of the asset and identity framework could be turned on that...

A new playbook needs to be developed for automated phishing analysis and response. Configured in SOAR are integrations with Splunk Enterprise Security and actio...

The following SPL is designed to report on a certain SOC metric. Which metric is the most likely topic for this report?

Which Splunk feature makes SPL searches shorter and reusable by inserting it into search strings?

An EDR tool was recently purchased and needs to be integrated into existing Splunk SOAR playbooks. Which actions are typically associated with this type of asse...