This code creates/configures a Kinesis Firehose in AWS to send CloudWatch log data to Splunk.

PowerShell Toolkit for HPE Primera and 3PAR supports PowerShell cmdlets, which are wrappers around the native HPE Primera and 3PAR storage CLI commands and Web Services APIs (WSAPI)

Actionable analytics designed to combat threats based on MITRE's ATT&CK.

Extended Splunk Alert Manager with advanced reporting on alerts, workflows (modify assignee, status, severity) and auto-resolve features

Splunk Security Addon for lateral movement detection

This repository contains all the config files and scripts used for our Open Source Endpoint monitoring project.

A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework

Test Blue Team detections without running any attack.

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public expl…

Deploy and maintain Symon through the Splunk Deployment Sever

Analyse your Splunk data from a Jupyter Notebook, as a Pandas Dataframe.

Exploit the credentials present in files and memory

A script to deploy File Server Resource Manager and associated scripts to block infected users