Overview
Learn how to revolutionize security and forensics investigations through a technical presentation that demonstrates Cribl Search's capabilities for conducting analytics directly on cloud-stored data across AWS S3, Azure Blob, and Google GCS platforms. Discover advanced features for enhancing SIEM alert investigations, including multidimensional aggregates, statistical deviation analysis, lookup functionalities, and data federation across both structured and unstructured data sources. Master efficient threat hunting and event investigation techniques that eliminate the need for costly vendor-specific storage solutions. Gain insights from David Cavuto, Director of Product Management, as he showcases how security professionals can leverage these powerful tools to transform their investigative workflows and improve security operations.
Syllabus
Unlocking Security Investigations with Cribl Search
Taught by
Tech Field Day