Collection of Dashboards for Threat Hunting and more!

A collection of awesome tools, software, libraries, learning tutorials & videos, frameworks, best practices and technical resources about Incident Response & Management in Cybersecurity

Plot relationships between objects with force directed graph based on ThreeJS/WebGL.

This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup a Suricata Port Mirrored Server

Boilerplate of splunk app and developer scripts, that allows you to leverage docker for development

The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.

A Splunk App for Attack Range Reporting. Provides dashboards for insights on your attack range simulations

Postfix Add-on for Splunk (Compliant with the Mail CIM model)

Kafka Smart Monitoring for Splunk

Splunk AppInspect

a useful tutorial about splunk and security splunk app

Splunk App to analyze traffic from pcap(ng) files

KV Store Tools Redux app for Splunk

JMESPath app for Splunk

A collection of Splunk modular visualizations based on plotly.js

A persistent server framework for Splunk app REST API written in go

Splunk topics with detailed explanation

splunk

Splunk Technology Add-on for SecurityMatters SilentDefense