A Glimpse into the “Search Your Target” Market for Stolen Credentials

Attackers no longer need to sift through massive credential dumps. They can pay others to do it for them. Flare explores how ...
GitHub

Splunk SOC Investigation: Suspicious Login and PowerShell Activity

This project simulates a Tier 1 SOC investigation using Splunk. The investigation focuses on a high-severity alert involving suspicious login activity, obfuscated PowerShell execution, and outbound ...
archive

Logging and log management : the authoritative guide to understanding the concepts surrounding logging and log management

Keep the news in the Wayback Machine. Sign Fight for the Future's letter. Please Don't Scroll Past This Can you chip in? The Internet Archive partners with libraries, archives, and institutions across ...
SecurityWeek

Splunk, Palo Alto Networks Patch Severe Vulnerabilities

Splunk and Palo Alto Networks on Wednesday rolled out patches for multiple vulnerabilities across their product portfolios, including critical and high-severity bugs. Palo Alto Networks drew attention ...
GitHub

Security Operations Center (SOC) lab project focused on SIEM deployment, Sysmon logging, and endpoint monitoring using Splunk Enterprise.

This project demonstrates the setup of a Security Operations Center (SOC) home lab using Splunk Enterprise, Sysmon, and Splunk Universal Forwarder to collect, forward, and analyze Windows endpoint ...
BizTech Magazine

Q&A: Splunk Expert Explains How Financial Institutions Can Get Started With Observability

While traditional monitoring notifies when a system is down, observability explains why to ensure customer services aren’t impacted.
IEEE

LogBERT: Log Anomaly Detection via BERT

Abstract: Detecting anomalous events in online computer systems is crucial to protect the systems from malicious attacks or malfunctions. System logs, which record detailed information of ...