HackAware AcademyHackAware Academy
← Back to all courses

Splunk SIEM

INTERMEDIATE

Splunk is one of the most widely deployed SIEM platforms in the industry. This course takes you from log ingestion to building production-grade dashboards, alerts, and detection use-cases for a SOC environment — with hands-on practice writing real Search Processing Language (SPL) queries.

What you'll gain

  • Real SPL query practice
  • Dashboard & alert building
  • SOC use-case design

Topics covered

  • 01Splunk architecture & data ingestion
  • 02Search Processing Language (SPL) fundamentals
  • 03Building searches, reports, and dashboards
  • 04Creating alerts and correlation searches
  • 05SOC use-case design and detection engineering
  • 06Field extraction and data models

Your instructor

Osama Rageh

Osama Rageh

Endpoint Security Senior Lead | SOC Analyst Engineer

LinkedIn ↗