Boss of the SOC and NOC
.conf18 | 1-4 October 2018 | Walt Disney World Swan and Dolphin Resort | Orlando, FL

Join us Monday, October 1, from 7:00 p.m. to midnight for our famous Boss of the SOC (BOTS) and Boss of the NOC (BOTN) competitions at .conf18. Played individually or in teams of up to four, BOTS and BOTN are competitions that have teams pivoting through realistic data using Splunk Enterprise Security or Splunk ITSI. All are welcome—from Splunk noobs to experts! Register today for .conf18 to be eligible to compete.

Boss of the SOC | October 1, 2018

Registered .conf18 attendees are invited to join the Splunk Security Team for the Boss of the SOC (BOTS) competition at .conf18. During the BOTS competition, you'll show off your l337 skills and compete against your peers for l00t and respect. See below for event details for your chance to become the Boss of the SOC!

 Register today for .conf18 to be eligible to compete! Already registered? Click here to submit your team.

Boss of the NOC | October 1, 2018

Registered .conf18 attendees are invited to join the Splunk IT Operations Analytics Team for the Boss of the NOC (BOTN) competition at .conf18. During the BOTN competition, you'll show off your Splunk-Fu and compete against your peers for prizes and bragging rights. See below for event details for your chance to become the Boss of the NOC!

 Register today for .conf18 to be eligible to compete! Already registered? Click here to submit your team.

What’s the Difference?

Want to find out which event is right for you? Check out the comparative chart below to find out if you're the Boss of the SOC or Boss of the NOC.



  BOTS BOTN
Solution Area
Security, Compliance and Fraud
IT Operations
Day and Time
Monday, October 1st, 7:00pm - 12:00am
Monday, October 1st, 7:00pm - 12:00am
Location
Dolphin Hotel, Southern Hemisphere I/II/III
Dolphin Hotel, Northern Hemisphere D
Scenario
You will role play as the quirky Security Analyst "Alice Bluebird," who is helping Frothly, a home brewing supply company that recently moved all on-prem servers to AWS and Azure. Sadly, there are several holes in Frothly’s cloud defense that were left from an aggressive cloud transition. Now, Alice is working through some of major incidents being experienced as a result.

Contestants will pivot through realistic data using Splunk’s analytics-driven security platform and the wild, wild web. All this while racing the clock to identify the who, how and where through a full forensic investigation. You will be given a series of questions of varying types and difficulties, with scoring based on timeliness and questions difficulty.
You will role play as an IT Operations-focused analyst who is helping Frothly, a home brewing supply company, work through some major incidents they have experienced in the last month due to some new IT staff they’ve hired to manage their cloud environments.

Contestants will pivot through realistic data in Splunk Core, Splunk IT Service Intelligence, and the wild, wild web, while racing the clock to identify the who, how and why of multiple IT incidents. Contestants will be given a series of questions of varying types and difficulties. Points will be based on timeliness and the difficulty of the question.
Contact Information
Questions? Please contact the BOTS team at bots@splunk.com or in the #bots2018 channel of the Slack group splunk-usergroups
Questions? Please contact the BOTN team at botn@splunk.com or in the #botn2018 channel of the Slack group splunk-usergroups

Want to get ahead of the game? Check out the original datasets from previous BOTS and BOTN events. Click here to access a sample dataset to practice your question and answers and before playing live at .conf18!