As the global pandemic shut down offices around the world, much of the workforce switched to remote work, putting organizations under enormous pressure to accelerate their transformation plans. their digital assets with flexible solutions that scale in a financially sustainable way.

As cloud adoption increases, Splunk has worked closely with its customers to securely upgrade critical infrastructure systems to the cloud and support the migration of security monitoring centers. (SOC). Additionally, Splunk also offers more flexible pricing options for customers’ security needs in Splunk Data-to-Everything Pricing. With new workload pricing, Splunk customers now have multiple options to maximize the use of all their data.

Splunk received the highest Score in the Product Vision Criteria

Splunk received the highest possible score from Forrester across key criteria including: correlation capabilities, custom discovery, compliance, risk scoring and prioritization, product vision , planned innovations and partners in the technology sector. It’s been a decade since Splunk pioneered the development of security analytics platforms. Since then, the company has continued to work closely with customers to enhance critical capabilities that help perfect their security functions across cloud and on-premises infrastructure.

Cloud technology is the next target for security analytics

According to Forrester’s report, the threat detection capabilities of security event analysis platforms deployed on cloud technology will determine the criteria on the rankings. Vendors can provide their customers with customizations, MITER’s ATT&CK model and SaaS services that enhance agility, incident detection and investigation capabilities. Today, thousands of customers use Splunk’s cloud solutions. Splunk’s security analytics platform enables the ultimate in flexibility, offering a wide range of deployment options from on-premise, hybrid to cloud. Splunk’s native, multi-tier big data architecture continuously scales up to 100 TB/day for Splunk Enterprise Security, delivering the highest sustained performance even to large customers like Intel – demanding organizations Security analysis needs to be as fast as possible. Splunk continues to deliver market-leading performance with its cloud-based security operations platform. Deep integration of monitoring, advanced analytics, investigations, and response automation enables SecOps teams to maximize productivity, while minimizing enterprise risk.

Continuous innovation

Splunk has announced the latest release of Splunk Enterprise Security (ES) 6.4 with enhanced features that will accelerate security operations going forward. Customers can easily map against leading cybersecurity frameworks, such as MITER ATT&CK, to quantify their security footprint; bring their data from AWS, Google Cloud Platform, and Microsoft Azure into existing detection and investigation workflows; Leverage native risk-based alerting to improve analyst productivity and improve detection of complex (e.g. low and slow) threats that traditional correlation searches often leave out.

Finally, Splunk also introduced new Splunk Mission Control capabilities at .conf20. In particular, Mission Control is a unified, cloud-native security operations platform that brings together security data, analytics and operations to simplify the management of security incidents throughout the entire incident cycle. security case. Security analysts can detect, investigate, prevent, and remediate threats from a common work surface. Splunk’s Mission Control Plug-in Framework can connect with third-party products (e.g., endpoint security, threat intelligence technology) to provide teams with visibility and control. Unified control across the entire security ecosystem.

VNCS is proud to be the sole distributor of Splunk in Vietnam. Contact us to get the best advice.