botsv1

Here are 7 public repositories matching this topic...

YoussefMAbbas / Splunk-Bots-Writeups

Hands-on Splunk BOTS investigations showcasing threat hunting, SPL queries, and detection logic.

Updated Mar 2, 2026

emilebarnard242 / splunk-lab-portfolio

Hands-on Splunk lab work covering SPL querying, alerting, and dashboard building using the BOTSv1 dataset and linux_secure sourcetype, progressing through the full Cyber Kill Chain from reconnaissance to actions on objectives.

splunk cybersecurity threat-hunting siem blue-team cyber-kill-chain soc-analyst botsv1

Updated Apr 4, 2026

dhruvshah-cyber / splunk-siem-homelab

Star

SOC monitoring environment built with Splunk Enterprise — detection rules for brute force, privilege escalation, and account lockout using real Windows event logs and BOTSv1 attack data

windows splunk incident-response cybersecurity threat-hunting siem soc blue-team mitre-attack botsv1

Updated Mar 21, 2026

d-osei / Cybersecurity-Portfolio

Star

A phased cybersecurity portfolio demonstrating Log Analysis, Threat Hunting (BOTSv1), and AI/ML Anomaly Detection. Built with Python, Splunk, and Pandas.

log-analysis scikit-learn jupyter-notebook pandas malware-analysis network-security splunk-enterprise threat-intel machine-learning-security botsv1

Updated Dec 22, 2025

YOUY0U / Splunk-Boss-of-the-SOC-v1-Writeups

Star

Splunk Boss of the SOC v1 investigation writeups covering website defacement and Cerber ransomware, with SPL queries, IOC analysis, MITRE ATT&CK mapping, OSINT pivots, and supporting screenshots.

osint splunk incident-response cybersecurity threat-hunting siem digital-forensics soc blue-team mitre-attack botsv1

Updated Jul 16, 2026

jesse12-21 / splunk-siem-analysis

Star

Splunk SIEM detection engineering on 33.4M BOTSv1 events — Risk-Based Alerting, contentctl detection-as-code with CI-built app, CIM/tstats detections mapped to MITRE ATT&CK, and Suricata EVE ingest.