Skip to content

This repository contains splunk queries and vizualization for both fortiweb and fortigate assets which help SOC analyst and security specialist to detect anomaly behaviour in some cases.

Notifications You must be signed in to change notification settings

signorrayan/fortiweb-fortigate-query-in-splunk

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

72 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

fortiweb-fortigate-query-in-splunk

This repository contains splunk queries and vizualization for both fortiweb and fortigate devices which help SOC analyst and security specialist to detect anomaly behaviour in some cases.

Queries and screenshots of each asset is placed in their directory.

demo

demo

About

This repository contains splunk queries and vizualization for both fortiweb and fortigate assets which help SOC analyst and security specialist to detect anomaly behaviour in some cases.

Resources

Stars

Watchers

Forks