Eggs, Alerts, and Adversaries: Talking with Jose Hernandez from Splunk

Interview with Jose Hernandez, Director of Splunk’s Threat Research Team, detailing how his team simulates attacks, builds and tests detections at scale, and uses automation and tools like Hunt.io, MagicSword projects (e.g., loldrivers.io), and Splunk’s detection-as-code framework to prioritize actionable, low-noise analytics. He discusses integrating SnapAttack capabilities, the importance of curiosity in hunting, leveraging trend analysis and enrichment for faster pivots, and operationalizing living-off-the-land intelligence, while also sharing personal reflections on work-life balance.