splunk

Splunk ES Correlation Searches Best Practices | OpsTuneinodee/threathunting-spl

A collection of Splunk SPL queries and prototypes for threat hunting and detection engineering.

Tangoaplura/Tango

A Splunk-based platform for deploying honeypots and analyzing attacker sessions with intelligence dashboards and threat feeds.

Acapulcohgascon/acapulco

A Splunk app that clusters security events from hpfeeds channels and visualizes them with D3.js parallel coordinates graphs.