Investigating attacks using Splunk Enterprise logs and creating SPL intrusion detection searches based on known attacker TTPs and anomaly behavior derived from statistical baselines
☆30Nov 19, 2023Updated 2 years ago
Alternatives and similar repositories for splunk-logs-and-investigations
Users that are interested in splunk-logs-and-investigations are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Microsoft-Defender-for-IoT☆14May 26, 2025Updated last year
- Links to VeteranSec Resources☆12May 18, 2020Updated 6 years ago
- Run Splunk heavy forwarders in Docker Swarm for high availability, security, and reduced cost!☆15Aug 19, 2025Updated last year
- a simple python script to de-obfuscate ABOBUS Batch script obfuscator☆10Jan 2, 2025Updated last year
- RGCN model for real-time fraud detection☆11Jan 27, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- TOCFL word-list CSV file generator☆18Nov 21, 2024Updated last year
- Transform any binary file to a PNG image☆13Jul 19, 2019Updated 7 years ago
- A Python script that decodes USB keyboard packet capture hex data.☆13Nov 17, 2021Updated 4 years ago
- This repository contains Splunk queries to hunt some anomalies☆47Jul 28, 2022Updated 4 years ago
- Credentials recovery project☆17Mar 13, 2019Updated 7 years ago
- ☆32May 14, 2018Updated 8 years ago
- Capture the Flag write-ups for challenged completed by myself.☆13Dec 7, 2020Updated 5 years ago
- SANS #CTI Summit 2025☆13Jan 28, 2025Updated last year
- ☆11Jul 10, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆10Sep 10, 2024Updated 2 years ago
- SPL cheatsheet for Splunk.☆27Dec 2, 2022Updated 3 years ago
- most powerful batch obfuscator☆65Jan 2, 2023Updated 3 years ago
- Predictive Incident Management analyses large data sets to identify risk patterns, predict outcomes, and guide teams on effective decisio…☆16Nov 25, 2022Updated 3 years ago
- Obfuscate any Python with only built-in functions☆17Oct 11, 2025Updated 11 months ago
- Code for the paper "Fuzzy c-Means Clustering for Persistence Diagrams"☆14Oct 14, 2023Updated 2 years ago
- Short deep dive into Threat Hunting on AWS☆20Oct 15, 2023Updated 2 years ago
- A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight,…☆49Oct 24, 2025Updated 10 months ago
- This code is to implement the model-free control algorithm as introduced in the paper Model-free control by Michel Fliess and Cedric Join…☆13Nov 29, 2017Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- https://marsvillager.github.io/PaperWorkflowAutomation/summary/visualize.html (Safari, Firefox ✓ Edge, Chrome ✗) 论文爬虫+概述: IEEE Symposium …☆12Oct 1, 2025Updated 11 months ago
- Ecg experiment, including Fourier transform, wavelet transform, wavelet decomposition and LSTM feature extraction. Emotion classification…☆11Jul 17, 2020Updated 6 years ago
- ☆12Jun 11, 2021Updated 5 years ago
- A collection of commands, tools, techniques and procedures of the purplestorm ctf team.☆14Mar 20, 2025Updated last year
- A PoC exploit for CVE-2024-4577 - PHP CGI Argument Injection Remote Code Execution (RCE)☆10Jul 12, 2024Updated 2 years ago
- ☆15Apr 10, 2025Updated last year
- Legacy Sigma Tools (sigmac etc.)☆17May 7, 2023Updated 3 years ago
- PoC for CVE-2026-3609 - XIGNCODE3 xhunter1.sys handle leak enabling PPL bypass and LSASS dumping☆37May 12, 2026Updated 4 months ago
- A mitmproxy addon that allows use of the HTTP Toolkit Android app.☆12Jun 25, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Assess certain AWS network configurations☆12Aug 22, 2018Updated 8 years ago
- Tool that can be used to trim useless things from a PE file such as the things a file pumper would add.☆30Apr 3, 2025Updated last year
- Machine learning on knowledge graphs for context-aware security monitoring (data and model)☆17Mar 11, 2022Updated 4 years ago
- MacInjector is a tool that lists macOS applications, checks code-signing vulnerabilities, and injects a dynamic library (dylib) into a vu…☆18Oct 8, 2025Updated 11 months ago
- A tool for patching/injecting code into elf binaries.☆15Sep 27, 2012Updated 13 years ago
- Wordpress Plugin Canto < 3.0.5 - Remote File Inclusion (RFI) and Remote Code Execution (RCE)☆17Nov 24, 2023Updated 2 years ago
- Bienvenue sur le dépôt GitHub de Hacking-France, le site dédié à la communauté de hacking éthique francophone. Ce projet vise à rassemble…☆13Updated this week