mrpappagiorgio

splunk-cisco-landscape-better-together

Splunk and Cisco Landscape | products, apps, integrations, and overall better together story in a visual way.

SA-CrowdstrikeIntelIndicators

This supporting add-on Adds CrowdStrike's intelligence indicators to Splunk Enterprise Security's threat framework.

ocsf

My custom splunk configs for ocsf compliance

splunk-otel-example

Jek personal examples on ingestion setup for Splunk Otel. These are not the official examples from Splunk.

TA-ad-assets-identities

Dump all users, groups and computers from an Active Directory domain into an asset and identities lookup usable by Splunk Enterprise Security.

community-splunk-scripts

This repo is for community scripts to be shared from. These scripts are community focused and not supported or endorsed by Splunk, use at your own risk

Splunk-Scripts

splunk-common-commands

Splunk

This repository is a comprehensive collection of resources, documentation, apps, and add-ons related to Splunk, a powerful data analytics and monitoring platform. The repository contains several Markdown files and other that provide valuable information and instructions for various aspects of working with Splunk.

Splunk_Hec

This repository contains some code snippets for creating a Splunk HTTP HEC, pulling some data from GBQ, and ingesting it into Splunk Enterprise

SysmonCommunityGuide

TrustedSec Sysinternals Sysmon Community Guide

hosts

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

splunkutils

powershell module for interacting with splunk resources via rest

SplunkSavedSearchInfoApp

Splunk-Inputs-WinSysAdminToolkit

Purpleteam

Purpleteam scripts simulation & Detection - trigger events for SOC detections

ThreatHunting-Keywords

Awesome list of keywords and artifacts for Threat Hunting sessions

SPlunk-Queries_Detection

Splunk Detections

splunk-cloud-storage-calculator

DDAA DDAS Storage forecaster

PLA1101B

Clara-Fication Workshop: Understanding the Expensive Bits in Your Splunk Environment

splunk-cloud-automation

Splunk Cloud various automation stuffs

splunk_cluster_admin_kit

Event-Forwarding-Guidance

Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber

auditd-config

SplunkForwarderRepairKit

Scripted inputs designed to address common use-cases in forwarder misconfigurations in a Splunk deployment

ingest_eval_examples

Splunk.Conf19

splunksecrets

splunksecrets is a tool for working with Splunk secrets offline

notes

Full of public notes and Utilities

CheatSheets

Collection of scripts, files, and tips to create and maintain networks, hack, and more!