Splunk
Named by 22 kept items in this workspace.
11 items name it under classification.technologies and 11 under tools.
Search every workspace for Splunk. It matches the name as written, so it can find other things that share it.
The items that name it 22
tool for searching and analyzing large volumes of log data
Queried with SPL through the notebook SDK.
consumes JSON telemetry output from Talaria
SIEM API import connector
SIEM alert querying/routing
SIEM platform used in practical labs for log analysis and querying by SOC analysts
external SIEM for flow log traffic analysis and monitoring
Referenced (via 'Configure PowerShell logging from Splunk') as a guide for configuring PowerShell logging
SIEM used for log analysis labs, noted as awfully slow in the labs
SIEM the author plans to use to build alerts for detecting ZipExec activity
SIEM solution used in SOC 3.0 labs for log analysis practice
All technologies in this workspace.