This repository contains Splunk queries to hunt some anomalies
☆48Jul 28, 2022Updated 4 years ago
Alternatives and similar repositories for Splunk-Threat-Hunting
Users that are interested in Splunk-Threat-Hunting are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise☆69Jul 2, 2026Updated 4 months ago
- A list of Splunk queries that I've collected and used over time.☆98Nov 3, 2020Updated 6 years ago
- Collection of Dashboards for Threat Hunting and more!☆75Oct 17, 2020Updated 6 years ago
- ☆14Jan 2, 2025Updated last year
- Splunk Queries for SOC Analyst☆17Jan 25, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Queries, Dashboards, and Splunk Knowledge Objects to Monitor Oracle Database Metrics☆14Mar 11, 2021Updated 5 years ago
- Splunk code (SPL) for serious threat hunters and detection engineers.☆294Jan 15, 2024Updated 2 years ago
- This repository contains end-to-end automation using Terraform and Ansible on AWS☆18May 21, 2023Updated 3 years ago
- A new era for SOCs begins☆24Jun 4, 2025Updated last year
- Threat Detection & Anomaly Detection rules for popular open-source components☆53Jul 27, 2022Updated 4 years ago
- A collection of Splunk dashboard templates.☆16Apr 18, 2019Updated 7 years ago
- Simple PowerShell script to enable process scanning with Yara.☆101Oct 4, 2022Updated 4 years ago
- 🐻❄️ 🏹 Threat hunting with Polars and flaws.cloud AWS CloudTrail datasets.☆15May 22, 2024Updated 2 years ago
- Crowdstrike response script containing various functions for IR/triage☆14Dec 7, 2020Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- CyberArk Privileged Access Security Application Performance Monitoring Dashboards for Splunk☆40May 20, 2020Updated 6 years ago
- Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic lo…☆24Jan 23, 2023Updated 3 years ago
- A collection of awesome resources for Splunk☆162Sep 11, 2020Updated 6 years ago
- Splunk new dashboard framework examples .conf 2019☆34Oct 28, 2023Updated 3 years ago
- Splunk Stuffs!☆14Oct 14, 2023Updated 3 years ago
- This pack is targeted for collections of Window events in the Classic or newer XML format. For events in the Classic format, sometimes th…☆17Jan 30, 2023Updated 3 years ago
- GreyNoise Splunk app☆11Sep 25, 2026Updated last month
- some scripts for splunk☆52Jan 2, 2020Updated 6 years ago
- ☆61Mar 4, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Home for Splunk security datasets.☆141Mar 18, 2020Updated 6 years ago
- A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon☆219May 23, 2020Updated 6 years ago
- Stupid Simple Detection Testing☆13Mar 7, 2024Updated 2 years ago
- Function ID for Malware Analysis☆13Jul 6, 2020Updated 6 years ago
- Hunt for Keywords , Mutex, Windows Event,Registry Keys,Process,Schedule tasks in Windows Machine☆22Dec 8, 2024Updated last year
- Splunk TA for sending completion requests to ChatGPT☆27Jun 12, 2026Updated 4 months ago
- An example of the use of tabs on a Splunk dashboard. #splunk☆22Aug 26, 2023Updated 3 years ago
- This repo is where I store my Threat Hunting ideas/content☆90Mar 20, 2026Updated 7 months ago
- splunk_pentest_app☆49Apr 22, 2016Updated 10 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Links to VeteranSec Resources☆12May 18, 2020Updated 6 years ago
- Splunk App for Linux Auditd☆57May 31, 2021Updated 5 years ago
- bash scripting cheatsheet.☆22Oct 13, 2021Updated 5 years ago
- Corelight-Ansible-Roles are a collection of Ansible Roles and playbooks that install, configure, run and manage a variety of Corelight, S…☆17Jun 15, 2021Updated 5 years ago
- Splunk Dashboard for CobaltStrike logs☆90Mar 16, 2021Updated 5 years ago
- Full of public notes and Utilities☆135Jan 6, 2026Updated 10 months ago
- An opinionated usenet media stack on Docker Compose - one codec, working hardlinks, documented traps.☆19Updated this week