~/splunk-splk-5001 · Investigation, Event Handling, Correlation, and Risk ▊
← Splunk Certified Cybersecurity Defense Analyst
SPLUNK · objective · 20% of the exam
Investigation, Event Handling, Correlation, and Risk
Exam objectives are the official skill domains Splunk Certified Cybersecurity Defense Analyst tests. Below are the official SPLUNK docs our questions on this objective cite — review them, then practise.
Sign in to track your progress on this objective.
Official references for this objective
-
Splunk — SIEM in Seconds - Splunk Enterprise Security Auto Refresh and Timeline of Notable Events | Splunk
the Incident Review interface, users will not have to re-run the Incident Response search or refresh the page
-
Splunk — SIEM in Seconds - Streamline Investigations with Splunk Enterprise Security | Splunk
UEBA Detect user and entity anomalies Detection Studio Develop and monitor detections