Using Splunk Enterprise Security (USES)

- ES concepts, features, and capabilities\n- Security monitoring and Incident investigation\n- Use risk-based alerting and risk analysis\n- Assets and identities overview\n- Creating investigations and using the Investigation Workbench\n- Detecting known types of threats\n- Monitoring for new types of threats\n- Using analytical tools and dashboards\n- Analyze user behavior for insider threats\n- Use threat intelligence tools\n- Use protocol intelligence