back to day 3
WEEK_1 · DAY_03 · LAB
Lab 3 — Design Your Stack
Every tool in the modern SOC stack — and why Splunk sits at the centre
LAB PROGRESS0/4 steps · 0%
Lab Objectives
- ›Map the modern SOC technology stack
- ›Differentiate SIEM, EDR, NDR, SOAR, TIP, vulnerability management
- ›Understand integration patterns (API, syslog, agent, webhook)
- ›Know where Splunk Enterprise Security fits
Lab Instructions
- 1For a 5,000-employee fintech, list every tool category needed.
- 2Pick a specific product per category (SIEM, EDR, NDR, SOAR, TIP, Email, Identity, VM).
- 3Sketch the data flow: which tools send to Splunk, and how (agent / syslog / API / HEC).
- 4Identify the 10 highest-value log sources to onboard first.