single glass of pain: see your world, maybe you wish you hadn't
TRANSCRIPT
© 2014 Global Technology Resources, Inc. All Rights Reserved. Contents herein contain confidential information not to be copied.© 2014 Global Technology Resources, Inc. All Rights Reserved. Contents herein contain confidential information not to be copied.
Presented By: Micah Montgomery
GTRI – Solutions Architect
Single Glass of Pain:See Your World, Maybe Wish You
Hadn’t
© 2014 Global Technology Resources, Inc. All Rights Reserved. Contents herein contain confidential information not to be copied.
GTRI Splunk Practice OverviewHighlights:• Splunk’s 1st Elite Partner and one of only two Splunk Certified Training Centers
in the U.S.• GTRI provides end-to-end support for Splunk from pre-sales engineering to
post-sales professional services, implementation, training and optimization• Splunk’s most credentialed partner in North America:
– GTRI holds over 50 Splunk Certifications:• 6 Certified Architects• 9 Certified Solutions Engineers (SE-I & SE-2)• 13 Certified Splunk Administrators• Certified Training Center
© 2014 Global Technology Resources, Inc. All Rights Reserved. Contents herein contain confidential information not to be copied.
GTRI Solution Areas & CapabilitiesGTRI Solution Areas & Capabilities
GTRISolution Areas
© 2014 Global Technology Resources, Inc. All Rights Reserved. Contents herein contain confidential information not to be copied.
So What is Big Data Anyway?
© 2014 Global Technology Resources, Inc. All Rights Reserved. Contents herein contain confidential information not to be copied.
The Pervasiveness of Malicious Traffic
© 2014 Global Technology Resources, Inc. All Rights Reserved. Contents herein contain confidential information not to be copied.
Need Both Network and EndpointAnd Inbound/Outbound!
Network Based
Indicators
Host Based Indicators
Best chance of Detecting the APT
© 2014 Global Technology Resources, Inc. All Rights Reserved. Contents herein contain confidential information not to be copied.
Big Data is Used Across IT and the Business
App Mgmt IT Ops Security Compliance Fraud Business Intelligence
Big Data
A Petabyte of Data is a Terrible Thing to Waste
© 2014 Global Technology Resources, Inc. All Rights Reserved. Contents herein contain confidential information not to be copied.
© 2014 Global Technology Resources, Inc. All Rights Reserved. Contents herein contain confidential information not to be copied.
Use Case – Premier Space Launch Provider
• Security tool to manage increasingly complex environment and monitor for APTs
• Centralized secure logging solution to meet compliance requirements.
• 65 + Unique Data Sources to Aggregate and Monitor• Multiple major data centers as well as remote offices. • Over 2,000 server systems and 5,000 end user
workstations.
© 2014 Global Technology Resources, Inc. All Rights Reserved. Contents herein contain confidential information not to be copied.
© 2014 Global Technology Resources, Inc. All Rights Reserved. Contents herein contain confidential information not to be copied.
Splunk Solution – Premier Space Launch Provider
• Multi-phase Splunk installation including Enterprise Security App.
• Phase 1 - High priority data types and the Splunk infrastructure.• Phase 2 - Correlation across data types, monitoring solutions
and locations.• 200GB initial daily volume license. • Redundant architecture centralizing data into the primary and
secondary data centers.
© 2014 Global Technology Resources, Inc. All Rights Reserved. Contents herein contain confidential information not to be copied.
Thanks for [email protected]