Splunk Certified Cybersecurity Defense Engineer

A SOC's Incident Response Standard Operating Procedure (SOP) calls for any phishing emails containing files to be detonated in Splunk Attack Analyzer for evalua...

Which fields are used to determine asset priority, when priority is assigned through an asset and identity lookup?

What framework in Enterprise Security allows engineers to build detections using known malicious IOCs comparing them to event logs to find suspicious behavior?

Which of the following can process data from configured containers using an automated sequence of actions?

A Detection Engineer works closely with SOC leads to define expected analyst workflows, often documented as a Standard Operating Procedure (SOP). Which capabili...