Splunk Enterprise Security (ES) Use Case Development
Keos · Cybersecurity & IT
Certification per AWS Marketplace.
Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
**Use Case Workshop:** Keos consultants review your environment and recommend up to 50 new security use cases tailored to your infrastructure and threat landscape.
**Risk-Based Use Case Development:** Keos writes SPL for 20 new risk-based use cases, ensuring each is MITRE-mapped and configured with appropriate alert actions.
Show the rest of the publisher’s description (3 more lines)
**Use Case Tuning:** New use cases are tuned using customer-specific lookup tables, time frame adjustments, and suppression rules to reduce noise and improve detection fidelity.
**CIM-Compliance:** Existing data streams are integrated into Enterprise Security data models using Splunkbase TAs, with index constraints added to data model macros.
**Whiteleaf AI Use Cases:** Keos installs and configures 100 AI-powered Whiteleaf use cases, validated and connected to Enterprise Security for risk score output.
Highlights
Highlighted by the publisher on AWS Marketplace.
Up to 20 custom, MITRE-mapped risk-based use cases developed and tuned for your specific environment
CIM-compliant data integration ensures detections run against properly structured, queryable data
100 AI-powered Whiteleaf use cases installed and validated within Splunk Enterprise Security
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Sources
Linked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.