Wednesday, November 17, 2021
1:30 AM - 3:00 AM

How our Best Security Teams get Better With Tanium

Cyber Security is a complex topic that many organizations struggle to implement and mature. More specifically, SOCs (Security Operation Centers) and Security Teams face the never-ending battle of administrating and operationalizing security tools to keep up with the latest threats. Additionally, Security Teams bear the responsibility of managing large sets of data across these tools. In response, Security Teams can leverage Tanium Core + Threat Response to quickly address areas of concern. In this session, participants will be able to perform the following:

  • Conducting health assessments on your threat response environment with Tanium ESOSS team
  • Using the saved questions from Threat Response to feed Threat Discover Dashboards
  • Analyze a recorder database and filter out the expected noise, increasing forensic recall from a few days to weeks or months
  • Aggregate endpoint data into Splunk with stream configurations


Pre Req(s): Basic familiarity with cybersecurity and/or a security-focused background

Additional Details:

Pass Type
Converge + Labs, Converge + Labs (Fed/Public Sector)
Location
Europe
Session Type
Lab
Session Track
Threat Hunting
Products & Solutions
Core, Threat Response
Difficulty
Beginner/Intermediate
Focus
Security