A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

Semantic Logger is a feature rich logging framework, and replacement for existing Ruby & Rails loggers.

Timeline of Active Directory changes with replication metadata

Don't Just Search OSINT. Sweep It.

💥 🚀 封装spark读取kafka，sparkstreaming动态调节batch time；封装sparkstreaming 1.6 - kafka 010 用以支持 SSL。

Test your code without writing mocks with ephemeral Docker containers 📦 Setup popular services with just a couple lines of code ⏱️ No bash, no yaml, only code 💻

Automated Use Case Testing

Splunk Security Content

Splunk code (SPL) useful for serious threat hunters.

Identifies unexpected and prohibited certificate authority certificates on Windows systems. #nsacyber

Scripts to pull DMARC reports from your mailbox (imap client) and convert it to Splunk friendly comma-separated key-value format

Development repository for Chef's Splunk cookbook

Mass static malware analysis tool

Automatically scores how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber

Ansible framework providing a fast and simple way to spin up complex Splunk environments.

Syntax highlighting for Splunk .conf files

Palo Alto Networks App for Splunk leverages the data visibility provided by Palo Alto Networks next-generation firewalls and endpoint security with Splunk's extensive investigation and visualization capabilities to deliver an advanced security reporting and analysis tool.

This repo will have all the data and codes I have used for my youtube channel

Bi-weekly hunting queries

A scalable prometheus remote storage adapter for splunk.

Sysmon Splunk App

Splunk App to assist Sysmon Threat Hunting

A Search command to explore Elasticsearch data within Splunk.

Python logging handler for sending logs to Splunk Enterprise

A website for monitoring web applications

A Splunk modular input for ingesting Prometheus metrics