Splunk Boss of the SOC - Oslo

Are you part of the best group of Security Analysts in Oslo? Are your threat hunters familiar with Splunk? Do you want to test your skills against other incident responders? mnemonic and Splunk have organized Boss of the SOC Oslo where you and your team can prove what you’re made of!

The Boss of the SOC (BOTS) is a Capture the Flag-esque (CTF) competition that is played in teams of up to four players and hosted by Splunk and mnemonic. The game features contestants playing the role of a SOC analyst. Participants are challenged to answer questions about security-related scenarios. Some are easy. Some are hard. Contestants will use their own laptop (OS doesn't matter as long as it can load Splunk in its browser) to access the online BOTS environment. 

Players will role play as as the quirky Security Analyst "Alice Bluebird," who is helping Frothly, a home brewing supply company that recently moved almost all on-prem servers to AWS and Azure. Sadly, there are several holes in Frothly’s defense that were left from an aggressive cloud transition. Now, Alice is working through some of major incidents with logs from Azure, Linux, Office 365, Cisco Firewalls, AWS, and many more! 

Benefits of your team entering this competition:

  • Practice security skills in a fun environment for free
  • Go through a live investigation and learn how you can improve your speed of investigations
  • Meet and exchange with peers about threat hunting tactics

Who should attend?
Security analysts, threat hunters, incident responders or similar security experience. A working understanding of basic Splunk search functionality.

Did you attend our last Boss of the SOC v2? No problem – this event is v3! And the challenges are completely changed!


Boss of the SOC competition

Award ceremony & wrap-up


Join your fellow contestants, mnemonic and Splunk for a networking dinner

What to bring
Your laptop
A team ready to compete!

Team size
A team of 2 to 4 is ideal, but solo contestants are welcome as well. Teams can also have members from different companies. Registering solo and want to be on a team? Let us know and we’ll try to find a team for you.

Email the following information to

  • Team name
  • Team members – name, email address and phone number
  • Attending dinner?
  • Special dietary requests

When registering for the event, please note that your contact information will be shared with Splunk.

Please register by June 6th.

Registration is now closed.