Every good cybersecurity employee needs to have the best tools to support them. On Cyberbit Range we believe that to for trainees to be successful analysts, they also need to know how to wield these tools and get the most out of the chosen tool. This means that trainees need to use real-world, commercially licensed tools against live attacks on corporate grade networks to truly understand how they function, how to maximize the tool, and when to use the tool. Currently, the only place for this to happen is on Cyberbit Range, the world’s leading SOC simulation training platform, and the only cyber range with commercially licensed tools available out of the box.

Cyberbit is proud to announce the addition of Splunk, the world’s leading Security Information and Event Management (SIEM) platform, to Cyberbit Range, further advancing the number of commercial grade tools available to our clients. Splunk currently holds the largest market share of any SIEM provider according to the IDC Worldwide Security Information and Event Management Market Shares 2018 Report. As a result of the popularity of Splunk many of our prospects and clients have requested that we add Splunk to our platform, ensuring that our catalog of cyber range exercises now have complete corporate grade networks including Splunk.

Why add Splunk?

One of the promises that we make to our customers is to include best-in-class tools so that you are training or studying using the same tools you would see every single day working at a security operations center (SOC). We believe that it is important to work with a higher level of tool to ensure that when you must respond to an attack in the real world, you are already familiar with the feature sets, processes, and capabilities of your tools. Splunk, a known market leader, is used by many of our clients and we believe that it is important for them to be able to train with Splunk to know how to detect and investigate, with muscle-memory level instincts, using Splunk in the real world.

What can you do with Splunk on Cyberbit Range?

Cyberbit Range scenarios including Splunk will now collect all events occurring on the network inside Splunk so that you can easily find relevant events, their urgency, related investigations, and further details surrounding your event. Collecting all your event data inside Splunk will also create a more effective training session, allowing trainees to focus on attack detection, investigation, and mitigation instead of searching for clues in various log files and tools.

Additionally, you can perform advanced searches inside Splunk to find correlated events and begin your analysis to determine attack vectors, correlated events to the same destination IP, pull system logs to perform a complete forensic analysis, and much more as Splunk has a vast number of features.

How can you try Splunk on Cyberbit Range?

Cyberbit Range makes it easy to find scenarios that include a specific tool you would like to use during a training session. On the left-hand side of your browser window on the cloud based Cyberbit Range, you will see a column labeled network components with a list of company logos. By checking the box to the left of the logo, you will only see scenarios that contain networks with that specific toolset. Simply check the box next to the Splunk logo and you will be able to see all the relevant scenarios. Choose the one that best suits the skillset you are working, book your session, and start training!

What if you don’t have a subscription to Cyberbit Range yet?

Cyberbit is proud to offer Splunk users or potential users the chance to try Splunk in a live attack scenario for free. All you have to do is click on the link below and you can register to have a member of our team reach out. During this conversation, we will schedule a training session on the world’s leading SOC simulation training platform. You will now have the opportunity to experience live attacks on a complete corporate grade network with commercial tools like Splunk to mitigate said attacks.