Splunk for IR and Forensics

Explore the power of Splunk for incident response and forensics in this 21-minute conference talk from BSides Cleveland 2016. Learn about typical log analysis techniques, Splunk's capabilities, and its applications in incident response. Watch a live demo showcasing log management, baselining, dashboard creation, and free alert features. Discover how to perform statistical analysis and parse unusual data formats, including text messages. Gain valuable insights from Tony Iacobelli's expertise and experience in the field of cybersecurity.

Introduction
Who is Tony
Typical log analysis
What is Splunk
Incident Response
Live Demo
Log Management
Baseline
Dashboard
Free Alert
Statistical Analysis
Parse Weird Data
Text Messages
Questions