Enhancing Cisco Security Solutions with Splunk (ECSS)

Course subjects

• Overview of Splunk Enterprise and Splunk Cloud

• Splunk Enterprise and Splunk Cloud Components

• Splunk Enterprise Data Ingestion

• Splunk Search Programming Language

• Splunk Dashboards and Reports

• XDR, SIEM, and SOAR Platforms

• Cisco XDR, Splunk SIEM, and Splunk SOAR

• Cisco Security Cloud App

• Cisco Secure Firewall Integration

• Cisco Splunk Integration

• Cisco Secure Malware Analytics, Duo, Secure Network Analytics, Email Threat Defense, and Multicloud Defense Integrations

• Cisco Security Legacy Apps and Technology Add-Ons

• Cisco ISE Integration

• Cisco NVM Integration

• Cisco Security Solutions and Splunk Use Case

• Cisco Splunk Use Case

• Troubleshoot General Splunk Issues

• Troubleshoot Cisco Security Cloud App

• Troubleshoot Cisco Legacy Apps and Add-ons

Lab Outline

• Explore Splunk Indexes

• Explore Splunk Web and CLI

• Verify and Test Data Ingestion

• Malware Events Analysis Using Splunk Enterprise Simulation

• Perform Search Queries

• Create Dashboards and Reports

• Explore Splunk SOAR

• Explore Cisco XDR Incident Investigation

• Cisco Secure Firewall Integration with Splunk

• Cisco XDR to Splunk Enterprise Integration Simulation

• Cisco Duo Integration Simulation

• Cisco SMA Integration Simulation

• Cisco SNA Integration Simulation

• Explore the Cisco ISE Integration with Splunk Using the Legacy ISE App and TA

• Explore the Cisco NVM Integration with Splunk Using the Legacy CESA App and TA

• Investigate Ransomware Using Splunk Enterprise with the Various Cisco Security Apps

• Troubleshoot Cisco Security Cloud App with Cisco Secure Firewall Integration

• Troubleshooting Cisco ISE Integration with Splunk

• Troubleshooting Cisco NVM Integration with Splunk