Investigating attacks using Splunk Enterprise logs and creating SPL intrusion detection searches based on known attacker TTPs and anomaly behavior derived from statistical baselines
☆29Nov 19, 2023Updated 2 years ago
Alternatives and similar repositories for splunk-logs-and-investigations
Users that are interested in splunk-logs-and-investigations are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repository is dedicated to hosting personal comprehensive walkthrough solutions for Splunk's Boss of the SOC (BOTS) CTF-style labs. …☆16Dec 30, 2023Updated 2 years ago
- Links to VeteranSec Resources☆12May 18, 2020Updated 6 years ago
- ☆37May 13, 2020Updated 6 years ago
- Transform any binary file to a PNG image☆13Jul 19, 2019Updated 7 years ago
- A Python script that decodes USB keyboard packet capture hex data.☆13Nov 17, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 3 months ago
- Bulk modify Splunk Knowledge Object's owners, permissions, apps, sharing and move them to another app☆26Aug 27, 2022Updated 3 years ago
- ☆32May 14, 2018Updated 8 years ago
- [DAC2024] Explainable Fuzzy Neural Network with Multi-Fidelity Reinforcement Learning for Micro-Architecture Design Space Exploration☆10Oct 31, 2024Updated last year
- ☆11Jul 10, 2022Updated 4 years ago
- ☆27Jan 19, 2021Updated 5 years ago
- Predictive Incident Management analyses large data sets to identify risk patterns, predict outcomes, and guide teams on effective decisio…☆16Nov 25, 2022Updated 3 years ago
- Code for the paper "Fuzzy c-Means Clustering for Persistence Diagrams"☆14Oct 14, 2023Updated 2 years ago
- Script from the paper generating encrypted network. Dataset☆12Sep 1, 2021Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Short deep dive into Threat Hunting on AWS☆19Oct 15, 2023Updated 2 years ago
- A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight,…☆45Oct 24, 2025Updated 8 months ago
- PoC for CVE-2026-3609 - XIGNCODE3 xhunter1.sys handle leak enabling PPL bypass and LSASS dumping☆30May 12, 2026Updated 2 months ago
- Ready made ducky scripts to use in nethunter Duckhunter HID attack to perform bad usb attack right at your fingertips.☆14Mar 24, 2026Updated 3 months ago
- Ecg experiment, including Fourier transform, wavelet transform, wavelet decomposition and LSTM feature extraction. Emotion classification…☆11Jul 17, 2020Updated 6 years ago
- In this work, we present a novel approach that combines the power of Koopman operators and deep neural networks to generate a linear rep…☆13Dec 1, 2025Updated 7 months ago
- ☆12Apr 7, 2026Updated 3 months ago
- A Python implementation of improved Label Propagation Algorithm.☆11May 26, 2021Updated 5 years ago
- Legacy Sigma Tools (sigmac etc.)☆17May 7, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- AirHack Project, a special wifi penetration tool for android☆18May 8, 2025Updated last year
- Source codes of "Fast Continuous Subgraph Matching over Streaming Graphs via Backtracking Reduction", SIGMOD 2023☆14Sep 7, 2023Updated 2 years ago
- A mitmproxy addon that allows use of the HTTP Toolkit Android app.☆11Jun 25, 2023Updated 3 years ago
- [DEPRECIATED] All writeups are moved to my main website☆14Mar 15, 2024Updated 2 years ago
- “A curated collection of OSINT tools, techniques, and resources based on personal notes and experiences.”☆18Jul 8, 2026Updated last week
- The Foundation AI Testing Hub (FAITH) is a benchmarking tool used to assess LLMs competency on (cybersecurity) knowledge/tasks.☆22Updated this week
- A repository of KQL queries focused on threat hunting and threat detecting for Microsoft Sentinel & Microsoft XDR (Former Microsoft 365 D…☆791Jun 3, 2026Updated last month
- Assess certain AWS network configurations☆12Aug 22, 2018Updated 7 years ago
- Machine learning on knowledge graphs for context-aware security monitoring (data and model)☆17Mar 11, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- MacInjector is a tool that lists macOS applications, checks code-signing vulnerabilities, and injects a dynamic library (dylib) into a vu…☆18Oct 8, 2025Updated 9 months ago
- A tool for patching/injecting code into elf binaries.☆15Sep 27, 2012Updated 13 years ago
- ☆18Sep 4, 2021Updated 4 years ago
- Inject shellcode into process via "EarlyBird"☆27Aug 30, 2021Updated 4 years ago
- Evergrowing compilation of challenges I authored for various CTF's and my Intended solutions☆13Oct 7, 2022Updated 3 years ago
- Automatically analyze Cyber Threat Intelligence (CTI) reports using machine learning (ML) to identify MITRE ATT&CK techniques (T-Codes)☆19Nov 4, 2025Updated 8 months ago
- Extensible vulnerable AI Bot to illustrate vulnerabilities in LLM applications.☆21Jun 17, 2024Updated 2 years ago