Alternatives and similar repositories for Splunk

Users that are interested in Splunk are comparing it to the libraries listed below

• shauntdergrigorian / splunkqueries
  A list of Splunk queries that I've collected and used over time.
  ☆89Updated 5 years ago
• christian-taillon / splunk-spl
  SPL cheatsheet for Splunk.
  ☆26Updated 3 years ago
• msraju / Incident-Response-Playbooks
  ☆47Updated 3 years ago
• signorrayan / Splunk-Threat-Hunting
  This repository contains Splunk queries to hunt some anomalies
  ☆46Updated 3 years ago
• activecm / threat-tools
  Tools for simulating threats
  ☆199Updated 2 years ago
• guardsight / gsvsoc_cirt-playbook-battle-cards
  Cyber Incident Response Team Playbook Battle Cards
  ☆425Updated last year
• CTI-Driven / Advanced-Threat-Hunting-Ransomware-Groups-Affiliates
  Advanced Threat Hunting: Ransomware Group
  ☆29Updated 6 months ago
• guardsight / gsvsoc_cybersecurity-incident-response-plan
  Cybersecurity Incident Response Plan
  ☆109Updated 5 years ago
• splunk / rba
  RBA is Splunk's method to aggregate low-fidelity security events as interesting observations tagged with security metadata to create high…
  ☆63Updated last week
• archanchoudhury / DFIR-Tools
  This is the One Stop place where you can find almost all of your Tools of Requirements in DFIR
  ☆85Updated 3 years ago
• Ge0rg3 / sans-index-creator
  Tools to automatically create a SANS index based off the course pdf files.
  ☆119Updated 5 years ago
• center-for-threat-informed-defense / cti-blueprints
  CTI Blueprints is a free suite of templates and tools that helps Cyber Threat Intelligence analysts create high-quality, actionable repor…
  ☆276Updated 10 months ago
• cylaris / awesomekql
  Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs
  ☆55Updated 2 years ago
• keyboardcrunch / sentinelone-queries
  Repository of SentinelOne Deep Visibility queries.
  ☆135Updated 4 years ago
• splunk / security_content_docs
  Contains research.splunk.com site code
  ☆11Updated last year
• st0pp3r / awesome-soc-analyst
  Online resources related to SOC Analysts. Incident investigation reference material, blogs, newsletters, good reads, books, trainings, po…
  ☆30Updated 6 months ago
• abdulshareef / DFIR-Resources
  Some important DFIR Resources
  ☆84Updated 2 years ago
• LucasFaudman / sans-index-generator
  Generate Indexes from SANS PDFs
  ☆18Updated last year
• CiscoCXSecurity / Detection-Engineering-Framework
  ☆96Updated last week
• pe3zx / crowdstrike-falcon-queries
  A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon
  ☆214Updated 5 years ago
• acquiredsecurity / Sentinel-One-STAR-Rules-Threat-Hunts
  SentinelOne STAR Rules
  ☆71Updated 11 months ago
• Xboarder56 / QRCE-Rules
  These are open source rules that can be utilized with QRadar to detect various types of threats in the environment.
  ☆57Updated 6 years ago
• cudeso / misp2sentinel
  MISP to Sentinel integration
  ☆79Updated last month
• SophosRapidResponse / OSQuery
  ☆88Updated 10 months ago
• PwC-IR / Business-Email-Compromise-Guide
  The Business Email Compromise Guide sets out to describe 10 steps for performing a Business Email Compromise (BEC) investigation in an Of…
  ☆277Updated 4 years ago
• Mikoyan-Dee / CrowdStrike-Queries
  CrowdStrike Falcon Queries For Advanced Threat Detection
  ☆29Updated 10 months ago
• chocolatecoat / DFIR-Templates
  Incident Response documents and tooling
  ☆111Updated 3 weeks ago
• SigmaHQ / pySigma-backend-insightidr
  ☆15Updated 4 months ago
• archanchoudhury / Detection-Rule-Dump
  This is the One Stop place where you can several Detection Rules which can help you to kick start your journey on SIEM, SOC work.
  ☆41Updated 4 years ago
• strandjs / ClassLabs
  ☆64Updated 4 years ago