Octamis
Splunk Enterprise Security
Splunk Enterprise Security (ES) is a security analytics platform that helps you to detect, investigate, and respond to security threats. ES uses a variety of machine learning, correlation, and threat intelligence techniques to identify and prioritise threats. It also provides a unified view of your security data, so you can easily track and investigate incidents.
Start your projectES can be used to
Key features of Splunk ES
Correlation
ES uses correlation to identify relationships between events.
Threat intelligence
ES uses threat intelligence to identify known threats.
Unified view
ES provides a unified view of your security data, so you can easily track and investigate incidents.
Reporting
ES provides reports and dashboards to help you demonstrate your compliance.
Risk-based alerting
Risk-based alerting (RBA) is a Splunk Enterprise Security (ES) feature that helps you to prioritise alerts based on their risk.
