Generic Signature Format for SIEM Systems

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

Semantic Logger is a feature rich logging framework, and replacement for existing Ruby & Rails loggers.

Timeline of Active Directory changes with replication metadata

Helm charts associated with kubernetes plug-ins

Don't Just Search OSINT. Sweep It.

💥 🚀 封装spark读取kafka，sparkstreaming动态调节batch time；封装sparkstreaming 1.6 - kafka 010 用以支持 SSL。

Automated Use Case Testing

Splunk code (SPL) useful for serious threat hunters.

Identifies unexpected and prohibited certificate authority certificates on Windows systems. #nsacyber

Scripts to pull DMARC reports from your mailbox (imap client) and convert it to Splunk friendly comma-separated key-value format

Development repository for Chef's Splunk cookbook

Mass static malware analysis tool

Automatically scores how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber

Ansible framework providing a fast and simple way to spin up complex Splunk environments.

Splunk Connect for Syslog

Syntax highlighting for Splunk .conf files

This is the Fluentd output plugin for sending events to Splunk via HEC.

Palo Alto Networks App for Splunk leverages the data visibility provided by Palo Alto Networks next-generation firewalls and endpoint security with Splunk's extensive investigation and visualization capabilities to deliver an advanced security reporting and analysis tool.

A scalable prometheus remote storage adapter for splunk.

This repo will have all the data and codes I have used for my youtube channel

Splunk App to assist Sysmon Threat Hunting

Sysmon Splunk App

A Search command to explore Elasticsearch data within Splunk.

A website for monitoring web applications

Python logging handler for sending logs to Splunk Enterprise

Cerner's Splunk Cookbook

A Serilog sink that writes to Splunk

Wazuh - Splunk app