efi-k Goto Github PK

arcsight2win

attack_data

A repository of curated datasets from various attacks

conf20_pla1471c

Repository for Splunk .Conf20 session PLA1471C Leveraging Splunk in a Chaotic Data World

corelight-threat-hunting-guide-sigma-pack

Corelight Threat Hunting Guide SIGMA Pack - Added TH searches and dashbaord to the splunk app

covid-19

Novel Coronavirus (COVID-19) Cases, provided by JHU CSSE

datamodels_view

A simple dashboard to display Splunk's Data Models, Datasets, Constraints and Fields

dragos_threat_actors_to_splunk

From Dragos Threat Activity Groups Mapping to Splunk Detections

hello-world

The begining

ics-cert

ICS-CERT

ics-vendors

List of ICS vendors, based on ICS-CERT alerts and advisories

ics_cert_ta

ICS-CERT Advisories project add-on for Splunk

ml_used_in_splunk_and_elk

Splunk Enterprise Security & Elastic SIEM built-in Machine Learning based rules

ossem-dm

OSSEM Detection Model

python-opcua

LGPL Pure Python OPC-UA Client and Server

security_content

Splunk Security Content

smart_win_security_app_for_splunk

smart_win_security_app_for_splunk

splunk-3d-graph-network-topology-viz

Plot relationships between objects with force directed graph based on ThreeJS/WebGL.

splunk-icons-draw-io

splunk icons

splunk_app_gvm

Splunk App for Greenbone Vulnerability Manager (formerly OpenVAS)

splunk_confversion_app-and-ta

Splunk App and TA that allows to see the configuration changes on your Splunk server ecosystem.

splunk_conpot_app

An app for processing ConPot ICS/SCADA Honeypot logs (http://conpot.org/)

splunkconf19_sessioninfo

Full session information guide for Splunk .conf 2019

syslog2win

Splunk app providing local conf for making syslog`d Windows events compatible with TA-Windows, data models and Splunk Security Essentials and ES

ta-gvm

Technical Add-on for Greenbone Vulnerability Manager

winlogbeat2splunk

Local config files for splunk Windows Add-On