splunk

There are 50 repositories under splunk topic.

SigmaHQ / sigma
Main Sigma Rule Repository
security monitoring siem logging signatures elasticsearch splunk ids sysmon
Language:Python 7620
graphistry / pygraphistry
PyGraphistry is a Python library to quickly load, shape, embed, and explore big graphs with the GPU-accelerated Graphistry visual graph analyzer
graph visualization gpu graphistry python rapids cugraph networkx neo4j tigergraph pandas csv webgl splunk cudf jupyter igraph network-analysis network-visualization graph-visualization
Language:Python 2054
gnomock
orlangure / gnomock
Test your code without writing mocks with ephemeral Docker containers 📦 Setup popular services with just a couple lines of code ⏱️ No bash, no yaml, only code 💻
cockroachdb docker elasticsearch end-to-end-testing go golang hacktoberfest integration-testing kafka kubernetes mariadb memcached mongo mysql postgres rabbitmq redis splunk sql-server testing
Language:Go 1305
security_content
splunk / security_content
Splunk Security Content
splunk detection engineering responses cicd cybersecurity detection-engineering
Language:Python 1136
olafhartong / ThreatHunting
A Splunk app mapped to MITRE ATT&CK to guide your threat hunts
splunk mitre-attack threat-hunting dfir
1102
siglens / siglens
100x Efficient Log Management than Splunk :rocket: Reduce your observability cost by 90%
distributed-tracing go hacktoberfest log-management log-search logging logs monitoring newrelic observability opensource opentelemetry splunk
Language:Go 995
reidmorrison / semantic_logger
Semantic Logger is a feature rich logging framework, and replacement for existing Ruby & Rails loggers.
bugsnag elasticsearch logging rails-semantic-logger splunk syslog
Language:Ruby 836
zentral
zentralopensource / zentral
Zentral is a high-visibility platform for controlling Apple endpoints in enterprises. It brings great observability to IT and makes tracking & reporting compliance much less manual.
macos inventory elasticsearch endpoint-management endpoint-security events gitops jamf mdm munki osquery santa splunk sumologic terraform unified-view apple-mdm
Language:Python 721
infosecB / awesome-detection-engineering
Detection Engineering is a tactical function of a cybersecurity defense program that involves the design, implementation, and operation of detective controls with the goal of proactively identifying malicious or unauthorized activity before it negatively impacts an individual or an organization.
detection-engineering splunk mitre awesome-list awesome cybersecurity threat-detection
550
blackhillsinfosec / EventLogging
Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.
active-directory elasticsearch powershell splunk threat-hunting windows-event-collector windows-event-logs
Language:PowerShell 447
ANSSI-FR / ADTimeline
Timeline of Active Directory changes with replication metadata
windows forensics dfir active-directory powershell timeline splunk
Language:PowerShell 445
Dicklesworthstone / automatic_log_collector_and_analyzer
Replace Splunk in your small company with this one weird trick!
ingestion log logging splunk
Language:Python 386
splunk / splunk-connect-for-kubernetes
Helm charts associated with kubernetes plug-ins
kubernetes chart splunk helm helm-chart
Language:Python 341
ThreatHunting-Keywords
mthcht / ThreatHunting-Keywords
Awesome list of keywords and artifacts for Threat Hunting sessions
awesome-list blueteam detection-engineering endpoint-security iocs offensive-scripts offensive-security redteam siem soc splunk threat-hunting threat-intelligence threathunting dfir incident-response forensic hacktools sigma-rules elk-stack
Language:HTML 336
ecstatic-nobel / OSweep
Don't Just Search OSINT. Sweep It.
osint splunk cybersecurity python threat-intelligence threat-hunting threat-analysis malware-analysis pivoting certificate-transparency cybercrime ransomware scanners threatcrowd urlhaus urlscan-io
Language:Python 300
inodee / threathunting-spl
Splunk code (SPL) for serious threat hunters and detection engineers.
splunk threat-hunting use-case siem rules spl
255
cloudmarker / cloudmarker
Cloud security monitoring tool and framework
azure google-cloud-platform elasticsearch mongodb splunk email slack security security-tools security-audit cloud cloud-security cloud-security-audit
Language:Python 216
LinMingQiang / sparkstreaming
:boom: :rocket: 封装sparkstreaming动态调节batch time(有数据就执行计算)；:rocket: 支持运行过程中增删topic；:rocket: 封装sparkstreaming 1.6 - kafka 010 用以支持 SSL。
spark kafka ssc-dstream sparkstreaming spark-kafka spark-es spark-kudu spark-hbase hbase kafka-spark kafka-util flink-kafka es-shade flink splunk kudu sparkstreaming-kafka rabbitmq-util hbase-util kafka-ssl
Language:Scala 182
pe3zx / crowdstrike-falcon-queries
A collection of Splunk's Search Processing Language (SPL) for Threat Hunting with CrowdStrike Falcon
crowdstrike splunk threat-hunting
168
P4T12ICK / ypsilon
Automated Use Case Testing
ansible cuckoo elk malware security siem splunk use-case
Language:TeX 161
splunk / splunk-connect-for-syslog
Splunk Connect for Syslog
splunk syslog
Language:Python 143
splunk / ansible-role-for-splunk
Splunk@Splunk's Ansible role for installing Splunk, upgrading Splunk, and installing apps/addons on Splunk deployments (VM/bare metal)
splunk-upgrade splunk-deployments splunk-admins splunk-forwarder splunk ansible anisble-role ansible-role-for-splunk splunk-installations splunk-role splunk-apps automation configuration-management ansible-playbooks git splunk-universal-forwarders splunk-ansible
Language:Jinja 134
siddharthajuprod07 / youtube
This repo will have all the data and codes I have used for my youtube channel
splunk youtube youtube-channel python javascript
Language:JavaScript 133
sduff / awesome-splunk
A collection of awesome resources for Splunk
awesome awesome-list splunk splunk-resources
118
splunk / splunk-platform-automator
Ansible framework providing a fast and simple way to spin up complex Splunk environments.
splunk splunk-enterprise vagrant virtualbox ansible aws ansible-playbooks splunk-environment
Language:Python 115
nsacyber / Certificate-Authority-Situational-Awareness
Identifies unexpected and prohibited certificate authority certificates on Windows systems. #nsacyber
certificate certificates certificate-authorities certificate-authority splunk windows
Language:PowerShell 106
PaloAltoNetworks / Splunk-Apps
Palo Alto Networks App for Splunk leverages the data visibility provided by Palo Alto Networks next-generation firewalls and endpoint security with Splunk's extensive investigation and visualization capabilities to deliver an advanced security reporting and analysis tool.
palo-alto-networks splunk firewall endpoint-protection analysis data-visibility visualization ngfw featured pan-os cortex-data-lake prisma-access prisma-cloud-compute-edition prisma-saas vm-series globalprotect cortex-xdr
Language:Python 98
prbinu / dmarc-report-processor
Scripts to pull DMARC reports from your mailbox (imap client) and convert it to Splunk friendly comma-separated key-value format
dmarc imap-client attachment splunk dmarc-reports dmarc-convertor gmail imap dmarc-parser python xml-files
Language:Python 93
nheijmans / malzoo
Mass static malware analysis tool
python wiki-page splunk mongodb elasticsearch malware-analysis automation email-parsing
Language:Python 91
safernandez666 / Kong-API-Manager
Kong API Manager with Prometheus And Graylog
api docker docker-compose grafana kong konga prometheus security security-tools siem splunk
Language:Python 88
spring-microservices-in-action
wuyichen24 / spring-microservices-in-action
The source code of the book "Spring Microservices in Action (John Carnell)" and the personal summary of technical essentials about Spring Boot for microservices.
spring-boot microservices netflix-eureka netflix-zuul netflix-hystrix netflix-ribbon kafka redis netflix netflix-oss splunk
Language:Java 85
splunk / fluent-plugin-splunk-hec
This is the Fluentd output plugin for sending events to Splunk via HEC.
fluentd plugin splunk hec
Language:Ruby 83
mulesoft-catalyst / metrics-toolkit
The metrics toolkit (formerly metrics accelerator/framework) is a Mule application intended to collect, aggregate and load platform metrics into different visualization systems; providing out of the box integrations and visualization options, including useful dashboards and charts.
metrics-accelerator metrics-framework metrics-toolkit platform-metrics splunk
Language:DataWeave 81
nsacyber / Splunk-Assessment-of-Mitigation-Implementations
Automatically scores how well Windows systems have implemented some of the top 10 Information Assurance mitigation strategies. #nsacyber
windows splunk compliance audit auditing scoring assessment
Language:Python 72
yorokobi / vim-splunk
Syntax highlighting for Splunk .conf files
splunk syntax-highlighting
Language:Vim Script 72
Ladder99 / fanuc-driver
Configurable Fanuc Focas data collector and post processor.
cnc driver fanuc focas iiot industry-40 influxdb mqtt mtconnect sparkplugb splunk
Language:C# 66

splunk

SigmaHQ / sigma

graphistry / pygraphistry

orlangure / gnomock

splunk / security_content

olafhartong / ThreatHunting

siglens / siglens

reidmorrison / semantic_logger

zentralopensource / zentral

infosecB / awesome-detection-engineering

blackhillsinfosec / EventLogging

ANSSI-FR / ADTimeline

Dicklesworthstone / automatic_log_collector_and_analyzer

splunk / splunk-connect-for-kubernetes

mthcht / ThreatHunting-Keywords

ecstatic-nobel / OSweep

inodee / threathunting-spl

cloudmarker / cloudmarker

LinMingQiang / sparkstreaming

pe3zx / crowdstrike-falcon-queries

P4T12ICK / ypsilon

splunk / splunk-connect-for-syslog

splunk / ansible-role-for-splunk

siddharthajuprod07 / youtube

sduff / awesome-splunk

splunk / splunk-platform-automator

nsacyber / Certificate-Authority-Situational-Awareness

PaloAltoNetworks / Splunk-Apps

prbinu / dmarc-report-processor

nheijmans / malzoo

safernandez666 / Kong-API-Manager

wuyichen24 / spring-microservices-in-action

splunk / fluent-plugin-splunk-hec

mulesoft-catalyst / metrics-toolkit

nsacyber / Splunk-Assessment-of-Mitigation-Implementations

yorokobi / vim-splunk

Ladder99 / fanuc-driver