Popular repositories Loading

1. Splunk-SIEM-Lab-v1 Splunk-SIEM-Lab-v1 Public

   End-to-end security investigation using Splunk Enterprise and the BOTS v3 dataset.

2. Splunk-SIEM-Lab-v2 Splunk-SIEM-Lab-v2 Public

   Splunk BOTSv3 SOC investigation - CoinMiner drive-by attack on Frothly Brewing with full MITRE ATT&CK, NIST CSF, NIST 800-53, and CIS Controls v8 framework mappings.

3. osticket-triage-agent osticket-triage-agent Public

   AI triage agent for osTicket. Claude classifies incoming tickets, a fixed action table decides the action, every decision logged to Splunk.

   Python