Splunk Incident Response Fundamentals
- Buy now
- Learn more
Resources

About This Course
Prerequisites
Access
Cancellation Policy
O-Line Security's Discord Server
Virtual Machine Files
Module 1: Introduction

Friendly Notice
Your Instructor
What Are We Learning
Incident Response
Objectives
Knowledge Check 1
Module 2: Lab Setup

Demo of Lab Setup 01
Demo of Lab Setup 02
Windows Lab Setup
Install VirtualBox on iOS
Import Virtual Machine iOS
Knowledge Check 2
Module 3: Incident Response w/ Splunk

Using Splunk - 01
Using Splunk - 02
Search and Reporting
Indexers
Knowledge Objects
Splunk Investigation 01
Splunk Investigation 02
Knowledge Check 3
Module 4: Your Turn

Hands-on Knowledge Check
Knowledge Check 4
Walkthrough 01
Walkthrough 02
Module 5: Conclusion

Conclusion
Resume Builder
O-Line Certificate of Completion
Incident Response Certificate
Troubleshoot Issues

Troubleshoot - PID Issues
Digest Mismatch Issue
Disk Space Issue
Virtualization Technology (VTX) Error
Legacy iOS Issue
Reinstall Splunk

Module 3: Incident Response w/ Splunk

8 Lessons