A collection of awesome resources for Splunk Enterprise Security
-
Updated
Sep 11, 2020
A collection of awesome resources for Splunk Enterprise Security
Allows Crowdstrike device information to be used with Splunk Enterprise Security.
🦸 AI skill that turns any LLM into a Splunk expert — architecture, SPL, development, administration, ES, SOAR, and more
This supporting add-on comes with prebuilt content for AWS data to be easily used with Splunk Enterprise Security's asset database.
Allows SentinelOne device information to be used with Splunk Enterprise Security.
Splunk app for managing detection-rule CSV whitelists with inline editing, approval workflows, version control, and diff-based audit trail
This is my Product Landing Page submission towards the Responsive Web Design Certification at freecodeacademy.org
Six Splunk detections as SPL and ES correlation searches: auth, endpoint, beaconing, and a risk-based alerting threshold, with risk annotations, throttling, lookups and replay tests.
🦸 Microsoft Copilot Studio agent design for the superman-splunk Splunk expert skill — instructions, knowledge mapping, prompts, actions, and migration plan
Splunk app for mlab.sh: enrich events with file-hash, URL, IP and CVE threat intelligence (KEV, EPSS, Tor) via a | mlab search command, and send alerts to ir.mlab.sh for incident response. Works with Enterprise Security as an adaptive response.
Equip LLMs with specialized Splunk knowledge for architecture, SPL development, administration, and Enterprise Security operations.
To associate your repository with the splunk-enterprise-security topic, visit your repo's landing page and select "manage topics."