This month we'll be discussing Splunk's recent acquisition of Phantom. We'll take a look how Phantom helps automate & streamline SOC tasks/operations and show how it integrates with Splunk. If time permits, we'll run through an example of a Phantom playbook and then open up for Q&A.
Improper City (newly opened workspace/venue) and has offered to host us this month. We'll have the usual drinks and light food along with our discussion. If you have any specific questions, feel free to post them here or DM them to Jay or I and we'll prepare accordingly.