splunk-addon

Collection of Dashboards for Threat Hunting and more!

A Splunk Technology Add-on to forward filtered ETW events.

Databricks Add-on for Splunk

Splunk TA for sending completion requests to ChatGPT

Splunk Add-on for PowerShell provides field extraction for PowerShell event logs.

This TA takes Suricata5 data from your port mirrored Suricata server and makes it readable within Splunk. See Cheatsheets on how to setup a Suricata Port Mirrored Server

Postfix Add-on for Splunk (Compliant with the Mail CIM model)

An add-on for splunk to collect data from Cisco Intersight.

Splunk add-on providing a custom search command to query Troy Hunt's haveibeenpwned API (https://haveibeenpwned.com/api/v3/) for known breaches of your domains or mail addresses.

This technical addon includes a collection of visualization tools for Splunk.

KV Store Tools Redux app for Splunk

Splunk topics with detailed explanation

QNAP Add-on for Splunk

Censys Splunk Add-on and Apps

Kaspersky SC Add-on for Splunk

Aruba Networks Add-on for Splunk

Splunk Add-On App for Cisco DNA Center

DCSO Threat Intelligence Engine (TIE) Add-On for Splunk v8

Splunk add-on to perform basic searches against the back end of Arkime using the Elasticsearch REST API.