Investigating attacks using Splunk Enterprise logs and creating SPL intrusion detection searches based on known attacker TTPs and anomaly behavior derived from statistical baselines
☆30Nov 19, 2023Updated 2 years ago
Alternatives and similar repositories for splunk-logs-and-investigations
Users that are interested in splunk-logs-and-investigations are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repository is dedicated to hosting personal comprehensive walkthrough solutions for Splunk's Boss of the SOC (BOTS) CTF-style labs. …☆16Dec 30, 2023Updated 2 years ago
- ☆16Mar 10, 2026Updated 5 months ago
- Collection of Splunking Tools, SPL Code and Resources☆16Jan 30, 2025Updated last year
- Microsoft-Defender-for-IoT☆14May 26, 2025Updated last year
- Construct triage artifact based on rules☆16Jun 18, 2026Updated last month
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Yara rules for malicious javascript files from public repositories or written by me.☆13Nov 12, 2021Updated 4 years ago
- Terraform Provider for Splunk ITSI☆15Jul 16, 2026Updated 3 weeks ago
- Run Splunk heavy forwarders in Docker Swarm for high availability, security, and reduced cost!☆15Aug 19, 2025Updated 11 months ago
- ☆18Nov 22, 2021Updated 4 years ago
- This short python script enables you to scan IPs on the fly by using VirusTotal's API. Just keep the window open on your extra monitor a…☆15May 14, 2026Updated 2 months ago
- RGCN model for real-time fraud detection☆11Jan 27, 2023Updated 3 years ago
- This repository contains Splunk queries to hunt some anomalies☆47Jul 28, 2022Updated 4 years ago
- Transform any binary file to a PNG image☆14Jul 19, 2019Updated 7 years ago
- Intuitionistic Fuzzy Broad Learning System: Enhancing Robustness Against Noise and Outliers☆11Oct 26, 2025Updated 9 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This is poc of CVE-2022-46169 authentication bypass and remote code execution☆15May 18, 2023Updated 3 years ago
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 3 months ago
- Capture the Flag write-ups for challenged completed by myself.☆13Dec 7, 2020Updated 5 years ago
- ☆11Jul 10, 2022Updated 4 years ago
- ☆10Sep 10, 2024Updated last year
- most powerful batch obfuscator☆68Jan 2, 2023Updated 3 years ago
- Obfuscate any Python with only built-in functions☆16Oct 11, 2025Updated 10 months ago
- Code for the paper "Fuzzy c-Means Clustering for Persistence Diagrams"☆14Oct 14, 2023Updated 2 years ago
- Short deep dive into Threat Hunting on AWS☆19Oct 15, 2023Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight,…☆48Oct 24, 2025Updated 9 months ago
- PoC for CVE-2026-3609 - XIGNCODE3 xhunter1.sys handle leak enabling PPL bypass and LSASS dumping☆36May 12, 2026Updated 3 months ago
- Ecg experiment, including Fourier transform, wavelet transform, wavelet decomposition and LSTM feature extraction. Emotion classification…☆11Jul 17, 2020Updated 6 years ago
- Large-scale Data Classification based on the Integrated Fusion of Fuzzy Learning and Graph Neural Network☆13Nov 2, 2023Updated 2 years ago
- ☆12Jun 11, 2021Updated 5 years ago
- In this work, we present a novel approach that combines the power of Koopman operators and deep neural networks to generate a linear rep…☆13Dec 1, 2025Updated 8 months ago
- A PoC exploit for CVE-2024-4577 - PHP CGI Argument Injection Remote Code Execution (RCE)☆10Jul 12, 2024Updated 2 years ago
- ☆15Apr 10, 2025Updated last year
- Royal Road RTF Weaponizer object decoder☆24Sep 26, 2024Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆12Apr 7, 2026Updated 4 months ago
- AirHack Project, a special wifi penetration tool for android☆18May 8, 2025Updated last year
- Predicting Internet of Things(IoT) Malware Attacks. Door Bells, Thermostats, Baby Monitors, Web Cameras, and Security Cameras attacked by…☆16Feb 21, 2021Updated 5 years ago
- Source codes of "Fast Continuous Subgraph Matching over Streaming Graphs via Backtracking Reduction", SIGMOD 2023☆14Sep 7, 2023Updated 2 years ago
- A mitmproxy addon that allows use of the HTTP Toolkit Android app.☆12Jun 25, 2023Updated 3 years ago
- Source code for 'Software Exorcism' by Bill Blunden☆13Mar 30, 2017Updated 9 years ago
- Useful scripts from past CTF challenges☆49Sep 21, 2025Updated 10 months ago