appinspect-api-action

GitHub action to validate a Splunk app package using the AppInspect API

appinspect-cli-action

A GitHub action to run Splunk AppInspect (cli) on a Splunk app

appinspect-ui

A User Interface for Appinspect

asparser

A module to collect and normalize ASN datasets and enrich with Geolocation results.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack-detections-collector

Collects a listing of MITRE ATT&CK Techniques, then discovers Splunk ESCU detections for each technique

attack_data

A repository of curated datasets from various attacks

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

attack_range_cloud

Attack Range to test detection against nativel serverless cloud services and environments

attack_range_local

Build a attack range in your local machine

azure-devops-splunk-alert-gate

Release Gate for Azure DevOps that checks Splunk Observability Cloud Alert Status before proceeding

azure-devops-splunk-events

Post events to Splunk Observability from Azure DevOps Pipelines and Releases

azure-functions-splunk

Azure Functions for getting data in to Splunk

azure-webhook-to-hec

azurefunctiondeployment

Deploy to your Azure Function from your Github repo

azurefunctionforsplunkvs

An Azure Function to make Azure Monitor telemetry available to a Splunk monitoring system.

azurenetworkwatchernsgflowlogsconnector

Ingest NSG flow logs and transmit to your log analytics system.

azuresubscriptionsoversplunkrest

backstage

Backstage is an open platform for building developer portals

baseline

The Baseline Protocol is an open source initiative that combines advances in cryptography, messaging, and blockchain to execute secure and private business processes at low cost via the public Ethereum Mainnet. The protocol will enable confidential and complex collaboration between enterprises without leaving any sensitive data on-chain

battlecat-poll

Real-time poll demo via Splunk HTTP event collector

biased-lang-linter

boo-configs

boto

For the latest version of boto, see https://github.com/boto/boto3 -- Python interface to Amazon Web Services

botsv1

botsv2

Splunk Boss of the SOC version 2 dataset.

botsv3

Splunk Boss of the SOC version 3 dataset.

build-update

cadvisor

Analyzes resource usage and performance characteristics of running containers.

car

Cyber Analytics Repository