This repository is a comprehensive collection of resources, documentation, apps, and add-ons related to Splunk, a powerful data analytics and monitoring platform. The repository contains several Markdown files and other that provide valuable information and instructions for various aspects of working with Splunk.

SIEM detection lab: SPL detections for brute-force, scanning, and exfiltration attacks mapped to MITRE ATT&CK, validated in a live Splunk instance.

Lab 04 — SIEM Setup with Splunk Cloud | Windows Security Log Analysis | SPL Queries | SOC Dashboard | 100 Events Ingested

A SIEM-based Fintech Threat Monitoring project using Splunk Enterprise to investigate suspicious transactions, phishing indicators, transaction structuring, malicious IP activity and threat hunting through interactive dashboards and SPL queries

An open-source SIEM monitoring project that aggregates alerts from multiple security platforms into a single dashboard and delivers instant notifications via Telegram.