rkondracki Goto Github PK

sigma

Generic Signature Format for SIEM Systems

smogcloud

Find cloud assets that no one wants exposed 🔎 ☁️

speed-siem-use-case-framework

Repository for SPEED SIEM Use Case Framework

spl-to-kql

The idea is simply to save some quick notes that will make it easier for Splunk users to leverage KQL (Kusto), especially giving projects requiring both technologies (Splunk and Azure/Sentinel) or any other hybrid environments. Feel free to add/suggest entries.

splunk

Splunk Stuffs!

splunk-1

splunk-3d-graph-network-topology-viz

Plot relationships between objects with force directed graph based on ThreeJS/WebGL.

splunk-7.2-enterprise-certified-administration-guide

Splunk 7.2 Enterprise Certified Administration Guide, published by Packt

splunk-addon-powershell

Splunk Add-on for PowerShell provides field extraction for PowerShell event logs.

splunk-ansible

Ansible playbooks for configuring and managing Splunk Enterprise and Universal Forwarder deployments

splunk-cluster-training

splunk-connect-for-syslog

Splunk Connect for Syslog

splunk-elasticsearch

A search command for Splunk which will allow you to search Elastic Search and display the results in the Splunk GUI

splunk-examples-custom-endpoints

Custom REST endpoint examples for Splunk Enterprise

splunk-lab

Splunk-cluster lab

splunk-lab-1

Create a lab instance of Splunk for ad hoc data analytics. Includes Splunk's Machine Learning app!

splunk_app

splunk_auditd

Splunk App for Linux Auditd

splunk_fields_analysis_presentation

Reference query information for the "What's in my Data?" presentation on analyzing Splunk fields data using fieldsummary and derivations of fields using REST API.

splunk_fundamentals

splunk_kvstore_tools

splunk_wineventcode_secanalysis

Beta 1.2 of Windows Event Code Security Analysis app for Splunk.

splunkarchitect

splunkenizer

Ansible framework providing a fast and simple way to spin up complex Splunk environments.

splunkforpcap

The PCAP Analyzer for Splunk includes useful Dashboards to analyze network packet capture files from Wireshark or Network Monitor (.pcap) and network streaming data (Splunk App for Stream). The App includes Dashboards which will show you: - The Top Talker IP's, Protocols, VLANs, Conversations - Detailed overview about IP Conversations, Packet Loss, TCP Error's, Round Trip Time - Conversation Sankey Diagram (by Packets, by Bytes, by Destination Port) - Microburst Dashboard (Bit timechart) - DNS / NFS / HTTP / Keep Alive Communication Dashboards - Hop Calculator between two IP's ROADMAP - Support for more protocols and more use cases - Dashboards will change to highlight the most important use cases for troubleshooting. FAQ http://devops-online.com/splunk-pcap-analyzer

splunkforwarder-deployment-config

stanford_machine_learning

Andrew Ng's famous coursera/stanford machine learning course

stopguessing

A system for protecting password-based authentication systems from online-guessing attacks.

swiftfilter

Exchange Transport rules to detect and enable response to phishing

sysmon-config

Sysmon configuration file template with default high-quality event tracing