Splunk-input-windows-baseline
Provides an advanced input.conf file for Windows and 3rd party related software with more than 70 different event log mapped to the MITRE Att&CK
AI summary
Windows log collector
Provides an advanced Splunk configuration for collecting Windows log data relevant to threat detection, incident response, and forensic analysis.
- stars
- 85
- forks
- 10
- watching
- 5
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
Log indicators
Provides Windows log event indicators mapped to MITRE ATT&CK tactic and techniques
Log collector
A PowerShell module for collecting and analyzing logs from Microsoft 365 and Azure systems
Audit maps
Provides detailed mindmaps on Microsoft auditing capacities and event logs for security and monitoring
Threat detection queries
Provides Splunk queries to detect vulnerability exploitation attempts and subsequent compromise, including threat hunting for MITRE ATT&CK TTPs
Splunk query library
Provides Splunk code and prototypes for building rules and queries to detect malicious activity
Log collector
A pre-configured Docker image for Elasticsearch, Logstash, and Kibana to facilitate log management and analysis.
Evidence collector
Automates evidence collection and analysis from Windows machines using PowerShell.
Event log analyzer
Utilities for analyzing and visualizing Windows event logs from Sysmon, helping users track and monitor system activity.
Security dataset
A comprehensive security dataset and CTF platform for analysis and training of information security professionals.
Data collector
Software for collecting and analyzing measurement data from industrial equipment.
Log analyzer
Automates analysis of Windows Security Events to identify user logon relations
Threat collector
Tool to gather Threat Intelligence indicators from publicly available sources
Event logging guide
Provides guidance on configuring and collecting Windows event logs to enhance forensic analysis and incident response capabilities.
Event log analyzer
Analyzes Windows Event Logs to identify security-related events and provides forensic tools for incident response.
Event Log persistence tool
Tools to write and read shellcode from Event Log using C# and Windows persistence mechanisms
Featured in 1 awesome list
Each link jumps to the spot where the list mentions Splunk-input-windows-baseline.
