The Coalfire Blog

Welcome to the Coalfire Blog, a resource covering the most important issues in IT security and compliance. You'll also find information on Coalfire's insights into the unique cybersecurity issues that impact the industries we serve, including Cloud Service Providers, RetailFinancial Services, Healthcare, Higher Education, Payments, Government, Restaurants, and Utilities.

The Coalfire blog is written by the company's leadership team and our highly-credentialed security assessment experts. We look forward to your comments, so please join the conversation.


  • Phantom Acquisition Lets Splunk SOAR

    September 12, 2018, Matt Alshab, Certified Splunk Admin

    At the SplunkLive! Conference in Washington, D.C., Splunk gave a presentation on Phantom, a Security Orchestration, Automation, and Response (SOAR) system. Splunk acquired Phantom this year for $350 million.

    Read more
  • Scripted Inputs and Splunk

    October 19, 2017, Josh Porto, Senior Consultant, Cyber Engineering, Coalfire

    Splunk is an extremely versatile tool when dealing with data:

    - Monitor files?  Check!

    - Listen in on an open port?  Check!

    - Monitor the file system? Performance monitor?  HTTP Event Collector?

    - Check, check aaaaand check!

    But what if the data you want to ingest does not have a method listed above? Say, something like a database or a security tool’s API? Scripted inputs are the solution! Splunk can even employ a variety of scripts to include (but not limited to) PowerShell, shell scripts, and Python.  Besides working around data sources, which do not use log files and cannot send via TCP or UDP, the advantages abound and include:

    Read more

Recent Posts

Post Topics

Archives

Tags