Inside the Network: Cybersecurity Insights from Jeetu Patel

Listen to this Post

In a recent episode of the Inside the Network cybersecurity podcast, Jeetu Patel, EVP and Chief Product Officer at Cisco, shared valuable insights on the evolving landscape of cybersecurity, the integration of Splunk into Cisco, and the role of AI in modern data platforms. Patel emphasized the importance of adaptability, the merging of security and observability, and the growing significance of data-driven decision-making in enterprise security.

Listen to the full episode here: Inside the Network – Jeetu Patel Interview

You Should Know:

1. Splunk Commands for Security Monitoring:

  • Search for failed login attempts:
    index=main sourcetype=linux_secure "Failed password"
    
  • Monitor SSH access logs:
    index=main sourcetype=linux_secure "sshd"
    
  • Track suspicious IP addresses:
    index=main sourcetype=access_combined | stats count by src_ip | where count > 100
    

2. Linux Commands for Security Audits:

  • Check open ports:
    sudo netstat -tuln
    
  • List running processes:
    ps aux
    
  • Inspect system logs for anomalies:
    sudo tail -f /var/log/syslog
    

3. Windows Commands for Security:

  • Check active network connections:
    netstat -an
    
  • List scheduled tasks:
    schtasks /query /fo LIST /v
    
  • Scan for malware using Windows Defender:
    MpCmdRun.exe -Scan -ScanType 2
    

4. AI in Cybersecurity: