Need books - resource training for Splunk - Fire Eye and Palo Alto

mjsinhsv

Does anybody have any url's for free E-Books for Splunk - Fire Eye and Palo Alto?
I need to spin up on these for a possible job.

thanks

wyntech

Not sure if you've seen it yet, but you can get a free online sandbox for Splunk to play with that includes a tutorial:

https://www.splunk.com/page/sign_up/cloudtrial?redirecturl=/getsplunk/onlinesandbox

You might find it more useful than a book if you're in a hurry.

BlackBeret

Splunk has a free version, install it and check it out. Going the engineer route?

Spin Lock

Fireeye is a customer of the company I work for. Been to their HQ in Milpitas several times. Great organization and they are one of pioneers in malware detection that isn't signature based (VM based sandboxes used for "detonation").

I've seen their equipment in action but I don't have access to documentation. However, FireEye has posted a few guides (one specifically related to Splunk):

https://www.fireeye.com/resources/pdfs/FireEye-App-for-Splunk-Enterprise.pdf
https://www.fireeye.com/resources/pdfs/tap-amazon-deployment-guide.pdf

mjsinhsv

Thanks spinlock, blackberet, wyntech.
That should be enough to get me started .

!nf0s3cure

The only thing you really need is to initially configure Splunk. Then it is all like searching on Google. Great Audit reduction product.