Detection Engineering carries 40 percent of Splunk SPLK-5002. This guide walks through correlation search tuning, risk-based alerting, the detection lifecycle, SOAR playbooks and the metrics that prove a SOC programme works.
Splunk SPLK-5002 Detection Engineering Exam Guide
