GitHub

Splunk SOC Investigation: Suspicious Login and PowerShell Activity

This project simulates a Tier 1 SOC investigation using Splunk. The investigation focuses on a high-severity alert involving suspicious login activity, obfuscated PowerShell execution, and outbound ...
archive

Logging and log management : the authoritative guide to understanding the concepts surrounding logging and log management

Keep the news in the Wayback Machine. Sign Fight for the Future's letter. Please Don't Scroll Past This Can you chip in? The Internet Archive partners with libraries, archives, and institutions across ...
The Hacker News

Critical Splunk Enterprise Flaw Lets Attackers Run Code Without Authentication

Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution. The ...
SecurityWeek

Splunk, Palo Alto Networks Patch Severe Vulnerabilities

Splunk and Palo Alto Networks on Wednesday rolled out patches for multiple vulnerabilities across their product portfolios, including critical and high-severity bugs. Palo Alto Networks drew attention ...