Alternatives and similar repositories for Splunk

Users that are interested in Splunk are comparing it to the libraries listed below

• christian-taillon / splunk-spl
  SPL cheatsheet for Splunk.
  ☆23Updated 2 years ago
• shauntdergrigorian / splunkqueries
  A list of Splunk queries that I've collected and used over time.
  ☆83Updated 4 years ago
• signorrayan / SplunkThreatHunting
  This repository contains Splunk queries to hunt some anomalies
  ☆42Updated 2 years ago
• msraju / Incident-Response-Playbooks
  ☆44Updated 2 years ago
• mildlytested / Wild-West---SOC-Core-Skills---Notes
  links collected from SOC Core Skills class
  ☆85Updated 4 years ago
• cylaris / awesomekql
  Microsoft Sentinel, Defender for Endpoint - KQL Detection Packs
  ☆54Updated last year
• abdulshareef / DFIR-Resources
  Some important DFIR Resources
  ☆83Updated 2 years ago
• guardsight / gsvsoc_cybersecurity-incident-response-plan
  Cybersecurity Incident Response Plan
  ☆91Updated 4 years ago
• strandjs / ClassLabs
  ☆59Updated 4 years ago
• elysiumsecurityltd / IRM
  Incident Response Methodologies (IRM), also called Incident Playbook, based on the work done by the CERT Societe General
  ☆24Updated 3 years ago
• LucasFaudman / sans-index-generator
  Generate Indexes from SANS PDFs
  ☆16Updated last year
• archanchoudhury / archanchoudhury
  ☆9Updated 2 years ago
• MarkBaggett / 504lab
  Distribution of the SANS SEC504 Windows Cheat Sheet Lab
  ☆70Updated 5 years ago
• Bert-JanP / SecScripts
  Security Scripts and Sources for daily usage.
  ☆60Updated 3 weeks ago
• archanchoudhury / DFIR-Tools
  This is the One Stop place where you can find almost all of your Tools of Requirements in DFIR
  ☆78Updated 3 years ago
• reversinglabs / reversinglabs-siem-rules
  A collection of various SIEM rules relating to malware family groups.
  ☆66Updated 11 months ago
• archanchoudhury / Detection-Rule-Dump
  This is the One Stop place where you can several Detection Rules which can help you to kick start your journey on SIEM, SOC work.
  ☆38Updated 3 years ago
• cudeso / misp2sentinel
  MISP to Sentinel integration
  ☆67Updated last week
• Xboarder56 / QRCE-Rules
  These are open source rules that can be utilized with QRadar to detect various types of threats in the environment.
  ☆55Updated 5 years ago
• chocolatecoat / DFIR-Templates
  Incident Response documents and tooling
  ☆74Updated last year
• st0pp3r / awesome-soc-analyst
  Online resources related to SOC Analysts. Incident investigation reference material, blogs, newsletters, good reads, books, trainings, po…
  ☆13Updated 2 months ago
• activecm / threat-tools
  Tools for simulating threats
  ☆185Updated last year
• splunk / TA-misp_es
  MISP to Splunk Enterprise Security Theat Intelligence Framework Integration
  ☆12Updated last year
• socprime / the-prime-hunt
  A browser extension for threat hunting that provides one UI for different SIEMs/EDRs and simplifies investigation
  ☆77Updated last year
• StrangeBeeCorp / thehive-templates
  ☆26Updated 2 months ago
• Truvis / SplunkDashboards
  Collection of Dashboards for Threat Hunting and more!
  ☆68Updated 4 years ago
• weslambert / securityonion-velociraptor
  Run Velociraptor on Security Onion
  ☆37Updated 2 years ago
• invictus-ir / o365_dataset
  A dataset containing Office 365 Unified Audit Logs for security research and detection
  ☆52Updated 2 years ago
• west-wind / Threat-Hunting-With-Splunk
  Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
  ☆63Updated last year
• dfir-dd / incident-response-playbooks
  Digital Forensic Analysis and Incident Response Playbooks to handle real world security incidents
  ☆43Updated last year