Threat-Hunting-With-Splunk
by west-wind
Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise
AI summary
Threat detection queries
Provides Splunk queries to detect vulnerability exploitation attempts and subsequent compromise, including threat hunting for MITRE ATT&CK TTPs
- stars
- 58
- forks
- 8
- watching
- 3
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
Splunk query library
Provides Splunk code and prototypes for building rules and queries to detect malicious activity
Threat Hunting App
A Splunk application designed to guide threat hunts by mapping investigations to the MITRE ATT&CK framework
Threat hunting tools
Collection of resources and concepts for threat hunting and detection engineering.
Malware toolkit
A collection of threat intelligence resources and tools for analyzing APT malware
Threat detection framework
A modular threat-hunting tool framework for detecting indicators of compromise in incident-response operations.
Threat Hunting Platform
A collection of tools and resources for threat hunters to identify and respond to cyber threats.
Security hub
Delivers threat intelligence and detection capabilities to Splunk Enterprise Security
Vulnerability scanner
Automated vulnerability detection tool for web applications
Pcap Demonstrations
A collection of PCAP captures used to demonstrate post-exploitation techniques and threat hunting tactics.
bugcrowd/hunt2.2K
Vulnerability scanner
An extension for Burp Suite that provides a structured approach to identifying and testing common vulnerability parameters.
Vulnerability scanner
An extension for Burp Suite that identifies potential security vulnerabilities in web applications by analyzing endpoints, parameters, and generating custom target wordlists.
Vulnerability scanner
Identifies web app endpoints and parameters to help detect vulnerabilities
Windows log collector
Provides an advanced Splunk configuration for collecting Windows log data relevant to threat detection, incident response, and forensic analysis.
Vulnerability scanner
Automatically scans endpoints for potential SQL Truncation vulnerabilities by fuzzing request parameters
Security dataset
A comprehensive security dataset and CTF platform for analysis and training of information security professionals.
Featured in 1 awesome list
Each link jumps to the spot where the list mentions Threat-Hunting-With-Splunk.
