Antoine Toulme,
Senior Engineering Manager,
Splunk
Antoine is the Engineering Manager for the data collection team at Splunk, working primarily on OpenTelemetry Collector. He has been a presenter at .conf, TKO and Hyperledger events, as well as Ethereum and Apache conferences.
“Using the OpenTelemetry Collector to Get Data In” Virtual: PST (U.S.)
In-person AMER: California
Slack (preferred): Antoine Toulme
Dianne Smith,
Observability Advisor,
Splunk
Dianne is an Observability Advisor with Splunk leveraging years of experience in the space.
“Current trends in Observability” “The impact of AI on the future of app development” “The Open Telemetry Project” Virtual: ET/EST (U.S.)
In-person AMER: Open, contact for availability
diannes@splunk.com
Dominique Vocat,
Lead Solution Architect Identity, Helvetia Insurances,
SplunkTrust
Avid Splunk user since forever (almost), well or since 3 dot something. Passionate about Splunk apps for filling in the gaps. Married with a 5 year old son going to kindergarten real soon. Day job is seemingly switching between cyber security and identity and access management which is arguably part of cyber security.
• Apps - developing custom commands and adding a small tool in the shape of apps
Virtual: GMT daytime and evening
In-person EMEA: Switzerland
Haylee Mills,
Staff Security Strategist,
Splunk
Haylee initially pursued a career in animation until she burned out, had a quarter life crisis, then pursued a career in cybersecurity. She started as a SOC analyst working crappy alerts, made better alerts and an elegant investigation workflow in Splunk with Risk-Based Alerting as a Content Engineer, and finally moved to Splunk to evangelize and advise on RBA as a Security Strategist. In that time, she has created and taught content for *actual* beginners to learn cybersecurity, and is on staff for cybersecurity conferences Defcon and Cactuscon. She loves art, animation, tabletop/video/boardgames, and has some top 100 global expert+ leaderboard scores in Beat Saber.
“Making Friends With Threat Object” “Curating your Risk Ecology: Making RBA Magick” “Streamlining Analysis of Security Stories with Risk-Based Alerting” Virtual: PST March-November, MST November-March (from Arizona)
In-person AMER: Phoenix/Tuscon
Jacob Stark,
Director, Product Management,
Splunk
Jacob leads product management for Splunk’s next generation pipeline processing. In his spare time, he enjoys drawing and making new friends.
“Splunk Pipeline Processing (Ingest and Edge Processor)” Virtual (only): PT/PST (U.S.)
James Young,
Principal Security Strategist,
Splunk
As a member of the Global Technical Security Strategist team at Splunk, James brings more than 25 years cyber security experience across cyber security engineering, architecture and consulting roles. James is focused on developing innovative approaches to help Splunk partners and customers improve cyber security capabilities and maturity. When James is not working you will find him with his family surfing, snowboarding or sailing. His session at .conf21 was the highest rated security session.
Splunk Risk Based Alerting (RBA) Splunk Detection as Code (DaC) “Optimizing Threat Detection with Splunk Security” Virtual: AEDT/AEST Mon-Fri
In-person EMEA + APAC: Australia/New Zealand and with approval for travel APAC.
jyoung@splunk.com
Slack: James Young (Splunk)
Justin Hardeman,
Staff Solutions Architect,
Splunk
Justin has been using Splunk since 2008. He’s worked in deployments from 1GB per day to 100's of TB's. Just has experience with Smartstore, Workload Management, Linux Administration, Application Monitoring and Analytics, and HA/DR design principals.
Splunk Core Platform Administration “Smartstore Deepdive / How smartstore works, sizing, deployment considerations” “Pre Flight Check / How to review capacity and see how a deployment is functioning thru diag review” Virtual: Afternoons ET/EST (U.S.)
In-person (AMER): “Anywhere”
Mark McCullough,
Cyber Security Architect,
SLAC,
SplunkTrust
A professionally paranoid problem solver tilting at the windmills of security while writing the fine manual.
Mark has been a presenter at NLIT (National Lab IT Summit), Department of Energy Splunk user group, and San Francisco Bay Area Splunk user group.
He is a member of the SplunkTrust.
NIST and other federal compliance Small to medium Splunk architecture “Writing the Fine (Splunk) Manual -- writing effective service docs for your Splunk infrastructure” “Logging is Hard -- compliance with m-21-31” Virtual (only) AMER: negotiable, US/Pacific time (U.S.)
Slack: mmccul
Martin Müller,
Principal Consultant,
Consist Software Solutions GmbH,
SplunkTrust
Martin is a Splunk Core Certified Consultant and has been a member of the SplunkTrust since 2015.
Virtual: Europe, Berlin
In-person EMEA: Europe, contact for availability
Mary Cordova,
Cyber Defense Lead,
Solidigm,
SplunkTrust
Mary Cordova has worked in the threat detection and response space for various industry leaders in gaming, media, and entertainment. She lurks around several L.A. based infosec communities.
Mary is a member of the SplunkTrust.
Getting to Know Data (How to Get Started with a New Dataset) Splunk + PowerBI (It's Better Thank You Think!) Virtual: PT/PST (U.S.)
In-person AMER: Open, contact for availability
Rod Soto,
Principal Security Research Engineer,
Splunk
Rod is a Principal Security Research Engineer with Splunk Threat Research that has presented at both .conf and industry conferences.
“Commonalities in Ransomware Payloads” “Linux Threat Detection with Attack Range” Virtual: Tuesday and Thursday afternoons EST (U.S.)
In-person AMER: Open to anywhere in U.S.
rsoto@splunk.com
Sebastian Kramp,
Team Lead Technical Business Analytics,
SVA System Vertrieb Alexander GmbH,
SplunkTrust
Sebastian Kramp is a member of the SplunkTrust and is a team lead for technical business analytics at the German system integrator SVA GmbH. He studied business informatics at FOM University in Germany. He earns several Splunk certificates like Core Consultant and ITSI admin and implementation. Customers are in several verticals. He likes to translate things from technical to business speech, and he can show how to change views and see the same things from different perspectives to solve problems and get deeper insights into their critical business processes.
In his free time, Sebastian also uses Splunk products to analyze the behavior of his wife's horse and monitors her riding training.
“How to Splunk Buttercup herself (Splunking a horse)” “ITSI: The Tip of the Iceberg” “ITSIncredible: From ITSI to OnCall - Direct and Meaningful Alerting: Getting to the Point” Virtual: Anytime!
In-person EMEA: Open, contact for availability
Sebastian.kramp@gmail.com
Slack: Sebastian (Basti) Kramp
Steve Flanders,
Senior Director of Engineering,
Splunk
As an Engineering Leader at Splunk, Steve leads the Observability platform area including contributions to the CNCF OpenTelemetry project. Previously, he served as a founding member and Head of Product at Omnition; and Global Engineering Manager for log analytics at VMware. Steve’s background includes business strategy, software development, product management, user experience, and operations management. He uses data-driven decision-making, agile development processes, and teamwork to create innovative and sustainable solutions; and is distinctly passionate about open-source software and democratizing data.
Observability / Splunk Observability Cloud “5 Reasons Why OpenTelemetry is the Future of Observability” “Log Support in OpenTelemetry” Virtual: I can make any day work with enough heads up. I am mostly on Eastern time with a preference to finish presentations by 5:00pm ET.
In-person AMER: New England area - anywhere in North America with tons of advanced notice
sflanders@splunk.com
Tapan Shah,
Director, Product Management,
Splunk
Tapan is a 20+ years industry veteran on Observability and monitoring domains for ITOps and AIOps. Tapan has been with Splunk for 3+ years managing Splunk ITSI, Infrastructure Monitoring, and On-call products.
Virtual: After 2pm PT/PST (U.S.)
In-person AMER: Bay Area
Ted Skinner,
Global Practices Team Security Architect,
Splunk
Ted’s career spans a quarter-century, with a dozen of those years dedicated to the realm of Information Security. Armed with a Master's in Computer Science, his expertise lies in the niche of Information Security. Lately, his attention has been fixated on cloud security and honing information security best practices.
For over a decade, Ted has wielded mastery as an ES User/Admin, well-versed in the intricacies of SOAR and UBA. Yet, amidst the complexities of digital defense, his respite comes in the form of a tireless six-year-old, whose boundless energy keeps him on my toes.
Virtual: Regular Business hours EST(U.S.)
In-Person AMER: Generally East Coast, within 3hr flight from Baltimore
tskinner@splunk.com
Tom Kopchak,
Director of Technical Operations,
Hurricane Labs,
SplunkTrust
Tom Kopchak's wealth of experience in leadership and Splunk is unmatched. His professional accomplishments have earned him induction into the esteemed SplunkTrust, Certified Architect status, Accredited Consultant distinction–as well as talks around the United States from DEFCON to Splunk .conf. When he's not inspiring audiences with his security insights, Tom is giving back to the next generation of cyber professionals by volunteering as a competition director for the National Collegiate Penetration Testing Competition (CPTC). With Splunk in tow, this opportunity allows him to help aspiring security experts take their skillset to new levels!
Splunk Tips, Tricks, helpful hints, etc. “Administrators Anonymous - Splunk Tips and Tricks I've learned the hard way” “Splunk Cloud vs. On-Prem: Overview and Comparison” Virtual: Monday - Friday, ET/EST (U.S.) evenings if needed
In-person AMER: Open, contact for availability