Articles
Distributed Latency Monitoring at Black Hat
4 min read
Learn how the Black Hat NOC/SOC used ThousandEyes, Linux command-line testing, and packet evidence to monitor distributed latency, isolate DNS issues, and validate network performance during a live cybersecurity event.
Splunk & Cisco Secure Firewall: Better Together at Cisco LiveAmsterdam 2026
4 min read
The Cisco Live Amsterdam SOC team upgraded to Secure Firewallversion 10.0, deploying new Splunk integrations and Advanced Loggingfeatures to enhance SIEM data quality and visibility, streamlineconfiguration.
Firewall and Splunk ESCU Integration at the Cisco Live Melbourne SOC
3 min read
Cisco Live SOC adapted Splunk ESCU detections for Cisco Secure Firewall syslog. Learn to modify macros and promote EVE events to incidents for enhanced threat visibility and response.
Monitoring Encrypted Client Hello (ECH) With Cisco Secure Firewall
4 min read
At GovWare 2025, the SOC team observed ECH activity. Learn more about this and how it impacted security.
Cisco Secure Firewall: SnortML at Black Hat USA 2025
4 min read
Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.
Black Hat Training Attendees Scan Aviation Organization
4 min read
Cisco is the Security Cloud Provider to the Black Hat conferences. Learn about the latest innovations for the SOC of the Future at Black Hat USA 2025.
Cisco Live San Diego Case Study: Investigating Attempted Admin Access With Secure Firewall?
3 min read
Cisco Security and Splunk protected Cisco Live San Diego 2025 in the Security Operations Center. Learn about the latest innovations for the SOC of the Future.