splunk-app-and-ta-development Goto Github PK

aclight

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

adtimeline

Timeline of Active Directory changes with replication metadata

analytic_story_execution

This app allows you to run all of the detections and related support searches in an Analytic Story at once.

ansible-demo-operations

ansible-hw-bootstrap

Example hardware provisioning with Ansible

ansible-patching

ansible-role-for-splunk

Splunk@Splunk's Ansible role for installing Splunk, upgrading Splunk, and installing apps/addons on Splunk deployments (VM/bare metal)

attack-tools

Utilities for MITRE™ ATT&CK

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

awesome

A curated list of awesome things related to TheHive & Cortex

awesome-badges

A curated collection of awesome things related to status badges

awesome-splunk

A curated list of awesome Splunk links

botsv1

botsv2

Splunk Boss of the SOC version 2 dataset.

caldera

Scalable Automated Adversary Emulation Platform

cisco_ios

Cisco Networks

config_explorer

Config viewer and file editor for Splunk. Based on VSCode.

constellation_cyber_plugins

The ACSC CyberTools Plugins are build upon the functionality of the Constellation data visualisation platform to deliver enrichments suited the cyber security community

ctr_network_viz

Network scenario visualization tool, designed for the Cyber Test Range at the Laboratory for Analytic Sciences (NSA/NCSU)

custom_chart_viz

Custom Chart Viz for splunk is built upon Apache ECharts library. It allows you to build a chart by custom option

da-ess-mitrecontent

MITRE ATT&CK Framework compliance dashboard and correlation searches that works with Splunk Enterprise Security and ES Content Update

darkfalcon

Splunk-based dashboards and visuals for working with the MITRE ATT&CK Framework

defender_ta_nxtp

Download :package: from splunkbase.

dendrogram_viz

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

detectionlabelk

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

dfirt

Collect information of Windows PC when doing incident response

eventing-splunk-app

Insights for Splunk

export_everything

Export Everything Add-On for Splunk

f5_asm