Firewall and Splunk ESCU Integration at the Cisco Live Melbourne SOC
Cisco Live SOC adapted Splunk ESCU detections for Cisco Secure Firewall syslog. Learn to modify macros and promote EVE events to incidents for enhanced threat visibility and response.