Security: Ask Me Anything About SOAR

Community Office Hours is an ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics.

This is your opportunity to ask questions related to your specific Splunk SOAR needs and use cases, including:

• New features from our recent 6.3 release
• SOAR 6.3 and Enterprise Security 8.0 integrations and the unified TDIR workflow
• Using SOAR and Attack Analyzer together
• Best practices for developing playbooks, workbooks and process workflows
• SOAR Apps recommendations
• Automatic incident response, Automating threat hunting, penetration testing, etc.
• Success measurement
• Anything else you'd like to learn!