Enhance Security Resilience Through Splunk User Behavior Analytics VPN Models | Splunk

The COVID-19 pandemic has spurred a significant increase in the adoption of remote access, resulting in a substantial portion of the workforce transitioning to remote work. This requires employees to heavily rely on their employer’s virtual private network (VPN) to connect to their company's IT systems. This shift to working from home (WFH) is expected to continue well into the foreseeable future. Furthermore, employees now commonly work remotely from various locations, such as coffee shops, hotels, airports, in addition to their own homes and company offices. The diversity of this remote workforce presents a challenge when it comes to monitoring VPN activities. At the same time, the heightened volume of VPN use has brought security threat events into closer proximity with VPN sessions, offering an opportunity to leverage VPN connection data for the detection of potential security threats. As a result, the security of VPN logins has become a significant concern, leading Security Operat

Enhance Security Resilience Through Splunk User Behavior Analytics VPN Models | Splunk Enhance Security Resilience Through Splunk User Behavior Analytics VPN Models Security November 07, 2023 Xiao Lin The COVID-19 pandemic has spurred a significant increase in the adoption of remote access, resulting in a substantial portion of the workforce transitioning to remote work. This requires employees to heavily rely on their employer’s virtual private network (VPN) to connect to their company's IT systems. This shift to working from home (WFH) is expected to continue well into the foreseeable future

related reading

• Elevating Security Intelligence with Splunk UBA's Machine Learning Models | Splunksplunk.com
• Anomalies detected by the Microsoft Sentinel machine learning engine | Microsoft Learnlearn.microsoft.com
• Advanced threat detection with User and Entity Behavior Analytics (UEBA) in Microsoft Sentinel | Microsoft Learnlearn.microsoft.com
• PerfectData Software Abuse and Account Takeover Risksdarktrace.com
• Baseline Hunting with the PEAK Framework | Splunksplunk.com
• Unsupervised Machine Learning with Splunk: the cluster command | by Alex Teixeira | Detect FYIdetect.fyi
• Model-Assisted Threat Hunting (M-ATH) with the PEAK Framework | Splunksplunk.com
• Splunk User Behavior Analytics (UBA) 5.4 Delivers FIPS Compliance and Advanced Anomaly Detection | Splunksplunk.com
• UEBA Superpowers: Enhance Security Visibility with Rich Insights to Take Rapid Action Against Threats | Splunksplunk.com
• Use customizable anomalies to detect threats in Microsoft Sentinel | Microsoft Learnlearn.microsoft.com
• Behavior Analytics in Your Security Data Lake Just Got Way Easieromeronsecurity.com
• Cloud coverage: Detecting an email payroll diversion attackredcanary.com