Abanobtamer·Oct 21Building a Mini SOC: Catching SSH Brute-Force Attacks and Data Exfiltration with SplunkA few weeks ago I got tired of just reading about SIEM tools and decided to actually get my hands dirty with one. So I set myself a small…
Samwel Ondima·Oct 4Installing Splunk on UbuntuSplunk is one of the SIEM tools used in a SOC to aggregate event logs. In this post I am going to walk through how I installed Splunk…
Mansi Sharma·Sep 25Investigating DNS Traffic with Splunk SIEM: A Practical WalkthroughWhy DNS Logs Matter ?
Dayanidhi Meganathan·Sep 4Splunk for beginners: things you can do with it. page 2Let’s Countine about splunk beginners stuffs
Dayanidhi Meganathan·Aug 31Splunk for beginners: things you can do with it.What can you be by learning Splunk? You can be a Splunk Enterprise admin or an Enterprise security guy on Splunk.
Abhishek Kumar Sah·Aug 28Detection Hygiene:Keeping Your Detection Estate CleanDetection engineering is often discussed in terms of building detections: write the logic, test it, tune it, and deploy it. But as the…
Mohammad Mirasadollahi·Aug 10Splunk Sizing Made Practical: Open-Source Capacity PlanningSplunk sizing is where many deployments go sideways not because the official Capacity Planning manuals are wrong, but because the math is…
Jaseer VK·Aug 7Build a SIEM Home Lab with Splunk Enterprise, Sysmon & Splunk Universal Forwarder on Ubuntu and…Introduction
Manohar T H·Aug 2Building a SOC Home Lab: Integrating Splunk SIEM with a Live MERN Web Application Hosted on RenderA walkthrough for How I Built a real home lab SOC pipeline, the problems I ran into, and everything I learned along the way.
