Advanced APT Hunting with Splunk is a modular, hands-on workshop designed provide a deeper dive into an Advanced Persistent Threat while providing an opportunity for participants to develop hypotheses and hunt. This workshop leverages Splunk and Enterprise Security and introduces how models like the Lockheed Martin Kill Chain, MITRE ATT&CK and Diamond Model can be used to contextualize their hunts. The workshop leverages the popular Boss of the SOC (BOTS) dataset in a multi-hunt format. Users will leave with a better understanding of how Splunk can be used to hunt for threats within their enterprise.This session will expose you to a deep dive into the APT hunting with Splunk. It will provide insight into adversary actions as well as give indicators of compromise by focusing on developing hypotheses and then hunting to confirm the hypothesis. The session designed to review hunting techniques using the Splunk Platform to better identify adversary activity as well as learn how Splunk can be used for threat hunting.Key Topics:a_¢ Hunting basicsa_¢ Hunting with Splunka_¢ Contextualizing your hunt using asset and identity informationa_¢ Key Data Sources and then some..