Sysmon Splunk App
☆48Oct 1, 2026Updated last month
Alternatives and similar repositories for sysmon-splunk-app
Users that are interested in sysmon-splunk-app are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Lists of sources and utilities utilized to hunt, detect and prevent evildoers.☆172Dec 10, 2018Updated 7 years ago
- ☆13Feb 6, 2018Updated 8 years ago
- OG Atomic Red Team☆30Jun 12, 2018Updated 8 years ago
- Splunk App to assist Sysmon Threat Hunting☆37Mar 7, 2017Updated 9 years ago
- Sources, configuration and how to detect evil things utilizing Microsoft Sysmon.☆946Dec 12, 2023Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆55Mar 2, 2022Updated 4 years ago
- How can you track the hunting techniques you come up with?☆13Sep 3, 2017Updated 9 years ago
- Manage Splunk Agents and Servers☆17Jul 16, 2025Updated last year
- Monitor syslog collection infrastructure & offer syslog configuration templates.☆27Feb 9, 2018Updated 8 years ago
- Deploy and maintain Symon through the Splunk Deployment Sever☆32Jul 30, 2020Updated 6 years ago
- Splunk Reference App - Pluggable Auditing System (PAS) - Code Repo☆23Jul 8, 2019Updated 7 years ago
- This repository contains generated contextual data utilized by pyattck.☆19Mar 3, 2025Updated last year
- Splunk Add-on for PowerShell provides field extraction for PowerShell event logs.☆17Feb 1, 2021Updated 5 years ago
- Ansible playbook for installing Splunk 6 on an AWS infrastruture☆20Aug 27, 2015Updated 11 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Splunk app for Threat hunting☆15Nov 15, 2018Updated 7 years ago
- This repository contains data related to coronavirus & COVID-19 based domains identified by Swimlane's DeepDive research team☆11Jul 6, 2020Updated 6 years ago
- Python OpenIOC Editor☆17Dec 28, 2015Updated 10 years ago
- Actionable analytics designed to combat threats based on MITRE's ATT&CK.☆24Aug 21, 2019Updated 7 years ago
- Splunk csv to KVStore ES Threat Intel☆11Jul 11, 2016Updated 10 years ago
- RBA is Splunk's method to aggregate low-fidelity security events as interesting observations tagged with security metadata to create high…☆67Sep 21, 2026Updated last month
- Data validator agains Splunk Common Information Model (CIM)☆79Jun 21, 2026Updated 4 months ago
- Find permanent WMI event consumers on endpoints that could be used by APT actors.☆17Jun 15, 2016Updated 10 years ago
- CrowdStrike Falcon log forwarder from falcon S3 bucket to your S3 bucket☆10Apr 15, 2021Updated 5 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- PSAttck is a light-weight framework for the MITRE ATT&CK Framework.☆38Jan 11, 2022Updated 4 years ago
- Detecting DNS Spoofing, DNS Tunneling, DNS Exfiltration☆37Sep 28, 2015Updated 11 years ago
- A Windows PowerShell & PowerShell Core Module to calculate a CVSS3 Score based on a Vector string☆12Dec 20, 2022Updated 3 years ago
- A search command for Splunk which will allow you to search Elastic Search and display the results in the Splunk GUI☆70Aug 10, 2025Updated last year
- Splunk scripted input for opening a backconnect shell on a remote forwarder☆45Nov 18, 2020Updated 5 years ago
- Honeypot Intelligence with Splunk☆255Oct 18, 2018Updated 8 years ago
- A Splunk technology add-on for osquery☆14Sep 5, 2025Updated last year
- This repo exists as a quick and dirty arsenal of methods and scripts to subvert .NET SSL/TLS certificate validation in PowerShell and pre…☆12Jan 28, 2017Updated 9 years ago
- HoneyDB Python Module☆16Oct 8, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- PowerShell module for creating and managing Sysinternals Sysmon config files.☆213Mar 29, 2021Updated 5 years ago
- Postfix Add-on for Splunk (Compliant with the Mail CIM model)☆11Mar 18, 2021Updated 5 years ago
- Security Operations Center Multiple Purpose Tool, takes IP address input, conducts OSINT, conducts splunk, bro, fireeye, imperva, and fir…☆23Jun 6, 2017Updated 9 years ago
- Technical add-on to ingest json formatted volatility memory analysis plugin outputs☆13May 21, 2018Updated 8 years ago
- Splunk Dashboards for GCP☆10Jan 9, 2024Updated 2 years ago
- Maps+ for Splunk☆23Jun 30, 2026Updated 4 months ago
- Repository for my ATT&CK analysis research.☆70May 16, 2019Updated 7 years ago