Splunk

925

Stories

548

Writers

Mando_elnino

·1 day ago

PS Eclipse — Tryhackme — Investigate using Splunk — Walkthrough

Here is a walkthrough about the PS Eclipse room on tryhackme! I’m going to refrain from giving answers so directly but if you follow along you’ll be able to find the answers no problem :) Per usual when doing these rooms connect to your tryhackme openvpn and launch the machine…

8 min read

PS Eclipse — Tryhackme — Investigate using Splunk Walkthrough

8 min read

Pawan Kumar

·Mar 22

Exploring Splunk — Lookups.

Previous Topic: Exploring Splunk — The Search. Lookups expand our event data by adding variations of the field-value from the search tables. Splunk uses lookups to match combinations of a field value in our event data with combinations of a field value in external lookup tables. …

5 min read

Exploring Splunk — Lookups.

5 min read

Burak Karaduman

·Mar 21

Play with Splunk | Sigma Rule Project — Custom REST Endpoint

Welcome to the third post of the series. If you didn’t read previous posts yet, I suggest you to read the below respectively. Play with Splunk | Full Stack App Development — Sigma Rule Project Play with Splunk | Sigma Rule Project — Configuring KV Store TL; DR In this post, you…

8 min read

Play with Splunk | Sigma Rule Project — Custom REST Endpoint

8 min read

Pawan Kumar

·Mar 21

Exploring Splunk — Data Ingestion.

Previous Topic: Exploring Splunk — The Architecture. Data ingestion is a process through which data is transferred through from one point of source to another and from there on it can be stored and considered for for further analyzing. The data that is transferred during the process of data ingestion…

3 min read

Exploring Splunk — Data Ingestion

3 min read

Pawan Kumar

·Mar 21

Exploring Splunk — The Architecture.

Splunk used to track, scan, analyze, and visualize the machine generated data (web applications, sensors, devices or any data created by user) in real-time. Why to learn Splunk? Splunk is a very popular software-based platform for storing and managing machine-generated data. It has become an industry-standard tool used by many big and small companies. Since…

5 min read

Exploring the Splunk — Part 1.

5 min read

Related Topics

Cybersecurity
Siem
Splunk Administration
DevOps
Security
Big Data
Threat Hunting
Logging
Machine Learning

Pawan Kumar

·Mar 21

Exploring Splunk — The Search.

Previous Topic: Exploring Splunk — Data Ingestion Splunk searches use SPL commands and arguments to retrieve, organize, and display data. A pipe character is used to start each new search string, followed by the command. Here’s the format for creating a Splunk search: Choose an index and a time range. …

3 min read

Exploring Splunk — The Search.

3 min read

Keerthi Konjety

·Mar 19

Upload .csv files to Splunk

I have listed the steps to upload a .csv file to splunk below. Login to your Splunk cloud account > Settings > Add data 2) Click on “Upload Files from my computer”

2 min read

Upload .csv files to Splunk

2 min read

solutionamardba

·Mar 16

CloudTrail Logs Ingesting in Splunk

AWS CloudTrail is a service that logs AWS API calls and related events for your account. It can be used to monitor and audit activity in your AWS account, and to troubleshoot operational issues. …

3 min read

CloudTrail Logs Ingesting in

3 min read

Burak Karaduman

·Mar 14

Play with Splunk | Sigma Rule Project — Configuring KV Store

Before the summary section, I strongly recommend you read the previous post of this series if you did not. Play with Splunk | Full Stack App Development — Sigma Rule Project TL; DR In this post I’ll share how to use KV Store as a database in the Sigma Project, you will…

5 min read

Play with Splunk | Sigma Rule Project — Configuring KV Store

5 min read

Kelvin Ling

·Mar 12

Investigate Attack Patterns using SIEM, Sysmon Utility and MITRE ATT&CK

In the “New Hire Old Artifacts” TryHackMe room, we can investigate a cyber incident using SIEM software — Splunk. The logs provided to Splunk were generated by a utility called Sysmon. …

7 min read

Investigate Attack Patterns using SIEM, Sysmon Utility and MITRE ATT&CK

7 min read