Splunk

With the rapid growth of cyber threats, malicious actors are increasingly using AI technologies to launch attacks, making threats more complex and harder to combat. Organizations must prioritize enhancing their cybersecurity systems to protect data and user privacy from continuously evolving attacks. MFEC’s Infosec team recognizes the critical role of AI in addressing these threats and has collaborated with Splunk and banking clients to test the integration of Splunk SIEM with AI/ML capabilities through the Splunk DSDL (Data Science and Deep Learning) application What’s Splunk DSDL ?   Splunk DSDL is an application from Splunk installed on Splunk SIEM, designed to connect with AI/ML systems set up on containers such as Kubernetes or Docker. The integration between Splunk DSDL and the user’s AI/ML systems enables a variety of functionalities, including data exchange for threat detection based on existing models, sending data to train new AI models, or even refining AI models