Popular repositories

1. threathunting-spl threathunting-spl Public

   Splunk code (SPL) for serious threat hunters and detection engineers.

   258 39

2. spl-to-kql spl-to-kql Public

   The idea is simply to save some quick notes that will make it easier for Splunk users to leverage KQL (Kusto), especially giving projects requiring both technologies (Splunk and Azure/Sentinel) or …

   35 5

3. Hunting-Queries-Detection-Rules Hunting-Queries-Detection-Rules Public

   Forked from Bert-JanP/Hunting-Queries-Detection-Rules

   KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

   1