Over the past few weeks, the Splunkernauts have been hard at work. We have been meeting with our liaison weekly and the meeting have helped us to paint a better picture of the problem at hand. One of our key focuses has been on learning Splunk.
Splunk is a platform that allows users to search, analyze, and visualize their data. Splunk can be used for a variety of different things but for our uses, we will be creating a security operations center (SOC) and analyzing relevant cybersecurity data. As we have been working on learning Splunk, the team has been learning about the potential cybersecurity threats. Some of the attacks we will be focusing on are Man-in-the-Middle attacks, Kerberos attacks, DDOS attacks, and others.