threathunting-spl

west-wind/threat-hunting-with-splunk58

Threat detection queries

Provides Splunk queries to detect vulnerability exploitation attempts and subsequent compromise, including threat hunting for MITRE ATT&CK TTPs

olafhartong/threathunting1.1K

Threat Hunting App

A Splunk application designed to guide threat hunts by mapping investigations to the MITRE ATT&CK framework

sbousseaden/slides372

Threat hunting tools

Collection of resources and concepts for threat hunting and detection engineering.

splunk/security_content1.3K

Security hub

Delivers threat intelligence and detection capabilities to Splunk Enterprise Security

threathuntingproject/threathunting1.7K

Threat detection resource

An informational repository providing resources and knowledge for detecting adversaries in IT environments.

gossithedog/threathunting570

Domain scanner

Tools and rules for detecting malicious domain calls in endpoint malware

miladaslaner/threathunt134

Threat simulator

A PowerShell repository to simulate and train threat hunting skills without malicious files.

splunk/attack_range2.2K

Attack simulator

A tool to simulate attacks against virtual environments and collect data into Splunk for detection development

a3sal0n/cyberthreathunting861

Threat Hunting Platform

A collection of tools and resources for threat hunters to identify and respond to cyber threats.

inquest/threatingestor836

Threat Scanner

Extracts and aggregates threat intelligence from various sources

threathunters-io/laurel722

Log converter

Converts Linux audit logs into standardized JSON format for enhanced security monitoring

sk4la/plast17

Threat detection framework

A modular threat-hunting tool framework for detecting indicators of compromise in incident-response operations.

splunk/botsv2358

Security dataset

A comprehensive security dataset and CTF platform for analysis and training of information security professionals.

ninoseki/mihari870

Threat hunter

An aggregator tool for querying multiple services to gather threat intelligence data.

phantomcyber/playbooks478

Threat playbook library

Community-developed playbooks and custom functions for Splunk SOAR threat hunting and incident response