Splunk Tools

A collection of Splunk SPL searches, detections, and threat-hunting references for security monitoring and investigations. Maintained by @EvolvingSysadmin.

Read it at splunk.ryanheavican.com or browse the Markdown in docs/. Companion to the Blue Team Toolkit.

Build locally

pip install -r requirements.txt
mkdocs serve

Then open http://127.0.0.1:8000.