A collection of awesome resources for Splunk Enterprise Security
-
Updated
Sep 11, 2020
#
splunk-es
Here are 3 public repositories matching this topic...
Comprehensive SPL query library for Splunk SOC analysts — beginner to advanced. Covers authentication, network, endpoint, threat hunting and incident response.
splunk cybersecurity threat-hunting spl soc blue-team security-analytics detection-engineering splunk-es
-
Updated
May 27, 2026
A high-performance migration framework for converting Splunk ES Linux detections from inefficient index-based searches to accelerated, CIM-compliant Data Model queries.
-
Updated
Oct 14, 2026 - Shell
Add this topic to your repo
To associate your repository with the splunk-es topic, visit your repo's landing page and select "manage topics."