Risk Based Alerting: The New Frontier for SIEM

Risk based alerting (RBA) is a transformational methodology to reduce alerts, close gaps, and derive more value from every security data source. Haylee breaks down the basics of the process and how that translates into better alerting with Splunk Enterprise Security.
November 2022 update! Visit our newly published The Essential Guide to Risk-Based Alerting here:
www.splunk.com...

[@jdkforchrist]

Haylee did a magnificent job telling a story and communicating the value of RBA through the demo.

[@ksofog]

Great video and explanation. Made it much easier to digest when navigating through Splunk itself and seeing how everything ties together.

[@7thdrxn]

Glad you enjoyed it Josh! Make sure to check out the Essential Guide to RBA if you need step-by-steps on planning out your implementation in ES. :)

[@SaiyanParmos]

Thank you so much for making this video... It helped so much...

[@charly19940]

Awesome!! thanks

[@jamesyoung6116]

Love it!