Case Study: Sandia National Laboratories achieves real-time threat intelligence with Splunk

Sandia National Laboratories gets HADES queries running in one day with Splunk

Sandia National Laboratories, a multi-mission U.S. National Nuclear Security Administration research and development lab, faced the challenge of a growing complexity of security threats which required advanced threat intelligence to protect national security. They turned to Splunk and its platform to power their High Fidelity Adaptive Deception and Emulation System (HADES).

Using the Splunk platform, Sandia's HADES solution provides real-time, real-world threat intelligence. It enables analysts to dynamically determine indicators of compromise and develop profiles of adversaries in real time instead of relying on after-the-fact forensics. This provided a fast time to value, with Splunk queries up and running in one day, and gave analysts a significant competitive advantage by shifting the cost of an attack to the adversary.

Sandia National Laboratories