Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Rod Soto
Using Splunk to Monitor AWS Bedrock Claude Security
Artificial Intelligence Key takeaways Monitoring AWS Bedrock Claude logs in Splunk helps teams detect suspicious AI activity, risky tool use, and potential data exposure. The blog explains how to collect Bedrock logs in Splunk and build detections using real AI activity and security signals. Example detections help identify risky tool use, sensitive data in prompts, prompt injection, and unusual AI activity to strengthen AI security.
Observability Challenges in Multi Agentic Environments
Artificial Intelligence Key takeaways Agentic AI workflows require new forms of observability that track decisions, tool usage, and interactions across multiple agents, not just traditional application activity. Organizations need visibility into agent identities, workflow states, data movement, and stored information to investigate issues and understand outcomes.
When AI Tools Turn Against You: Operationalizing MCP Server Security with the Splunk MCP TA
The Model Context Protocol (MCP) is an open-source protocol developed by Anthropic and released in November 2024 to standardize how AI applications connect to external data sources and tools. The protocol emerged from Anthropic’s work on Claude Desktop, where they recognized the need for a universal standard that would allow AI systems to integrate with various data sources, APIs, and local resources without requiring custom implementations for each integration.
When AI Tools Turn Against You: Operationalizing MCP Server Security with the Splunk MCP TA
The Model Context Protocol (MCP) is an open-source protocol developed by Anthropic and released in November 2024 to standardize how AI applications connect to external data sources and tools. The protocol emerged from Anthropic’s work on Claude Desktop, where they recognized the need for a universal standard that would allow AI systems to integrate with various data sources, APIs, and local resources without requiring custom implementations for each integration.
From Discovery to Defense: Detecting Local LLMs to Address Shadow AI
The development and widespread adoption of AI has also brought many challenges, including the shifting of priorities, the need to adapt and embrace these new technologies, and use them in a leveraging manner. This has also brought many challenges that come with the adoption and use of these technologies.
From Discovery to Defense: Detecting Local LLMs to Address Shadow AI
The development and widespread adoption of AI has also brought many challenges, including the shifting of priorities, the need to adapt and embrace these new technologies, and use them in a leveraging manner. This has also brought many challenges that come with the adoption and use of these technologies.
Introducing the Splunk Technology Add-on for Ollama: Illuminating Shadow AI Deployments
Without strong visibility and governance, local LLMs risk replicating the fragmented, unsupervised sprawl once seen in shadow IT, complicating security postures and making it difficult for organizations to ensure proper oversight and compliance as these powerful AI tools become embedded in daily workflows.
Getting Started With Copilot Log Analysis for Security in Microsoft 365 With Splunk
Microsoft 365 (M365) is a Microsoft product suite of productivity, collaboration and security tools designed to support enterprises, small businesses and individual users. This suite includes cloud-based applications such as Word, Excel, PowerPoint, Outlook, Teams, SharePoint and OneDrive under a unified platform. Depending on the license level of Microsoft 365 it also includes Microsoft Purview for data compliance and Microsoft Defender for security monitoring.
Getting Started With Copilot Log Analysis for Security in Microsoft 365 With Splunk
Microsoft 365 (M365) is a Microsoft product suite of productivity, collaboration and security tools designed to support enterprises, small businesses and individual users. This suite includes cloud-based applications such as Word, Excel, PowerPoint, Outlook, Teams, SharePoint and OneDrive under a unified platform. Depending on the license level of Microsoft 365 it also includes Microsoft Purview for data compliance and Microsoft Defender for security monitoring.
Using RAG, Splunk ES Content Update App (ESCU), and MLTK to Develop, Enhance, and Analyze Splunk Detections | Splunk
This blog post focuses on employing a local LLM (llama3:8B) via Ollama for optimization. We aim to refine it using RAG (Retrieval-Augmented Generation), a technique that augments language model outputs by gathering data from external sources prior to response generation. This information will subsequently be employed alongside Splunk MLTK machine learning functions and the latest AI prompt features, enhancing the precision of Splunk detection results.
Using Splunk to Develop Local LLM MCP Mitre Atlas Detections
Continuing our journey into understanding and addressing threats against locally hosted LLMs and MCP servers we are going to put the pieces of the puzzle together. In this blog, we are going to work on developing Mitre ATLAS detections based on logs obtained from Ollama hosting the most popular open source LLM (llama), used in conjunction with a Model Context Protocol Server and a security testing and red team tool that targets LLMs known as Promptfoo.
Using Splunk to Monitor the Security of MCP Servers
In this blog we are going to address how to use Splunk to monitor security of MCP Servers, a new technology that has been developed by Anthropic and has definitely bridged the use of local applications with Large Language Models (LLMs). What Is MCP? Model Context Protocol (MCP) is described as a universal translator that allows an AI to safely "talk to" different systems - whether that's your company's database, a file system, web APIs, or other software tools.
Using Splunk to Monitor the Security of MCP Servers
In this blog we are going to address how to use Splunk to monitor security of MCP Servers, a new technology that has been developed by Anthropic and has definitely bridged the use of local applications with Large Language Models (LLMs). What Is MCP? Model Context Protocol (MCP) is described as a universal translator that allows an AI to safely "talk to" different systems - whether that's your company's database, a file system, web APIs, or other software tools.
How to Use Splunk to Monitor Security of Local LLMs (Part II)
In Part II of "How to Use Splunk to Monitor Security of Local LLMs," we break down the main areas of focus for defending Local Large Language Models (LLMs) and the current frameworks that provide guidance on LLM threat prevention and defense. We will use log data and Splunk to accomplish this.
How To Use Splunk To Monitor Security of Local LLMs (Part I)
With the recent increase in use and popularity of Large Language Models (LLMs), many organizations are still trying to approach the use of this technology. In this blog, we approach the different log sources that can be potentially used to monitor a local LLM.
Splunk : Find the Fingerprints and Traces of Threats with Splunk at RSAC 2021 | MarketScreener
(SPLK) Report Real-time Estimate Cboe BZX - 05/07 03:09:16 pm 117.53 USD +0.64% 03:02p SPLUNK : Find the Fingerprints and Traces of Threats with Splunk at RSAC 2021 PU 05/06 SPLUNK : Boss of Ops and O11y (BOO) Global Events Update PU 05/06 SPLUNK SOAR PLAYBOOKS : Suspicious Email Domain Enrichment PU Summary Quotes Charts News Ratings Calendar Company Financials Consensus Revisions Summary Most relevant All News Analyst Reco.
Cloud Federated Credential Abuse & Cobalt Strike: Threat Research February 2021
This month, the Splunk Threat Research team developed a total of seven analytic stories addressing different types of threats and more than a dozen of new detections to help our customers detect and fight against these threats. In this blog post, we’ll walk you through two analytic stories and a few detection searches that we want to highlight from the February 2021 releases.
The Path of an Outlaw, a Shellbot Campaign
The ability of an actor to remain undiscovered or obfuscating its doings when driving a malicious campaign usually affects the gains of such campaigns. These gains can be measured in different items such as time to allow completion of operations (exfiltration, movement of compromised data), ability to remain operative before take down notices are issued, or ability to obtain gains based on for-profit driven crimeware (DDoS for hire, Crypto mining).
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Rod
Contact Rod, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack