Phantom Function Exploration: extract_regex
Welcome to the Phantom Function blog collection’s inaugural post. [...]
Deploying the Splunk Universal Forwarder on Windows
The Splunk Universal Forwarder is the best mechanism for [...]
How to Generate a Diag in Splunk
When working with your Splunk environment or troubleshooting an issue, [...]
Splunking the Zombie Apocalypse
At Hurricane Labs, we love logs and we love [...]
Splunking with Sysmon Part 4: Detecting Trickbot
Trickbot and Ryuk With the recent outbreak of Ryuk [...]
Using Splunk Streamstats to Calculate Alert Volume
Dynamic thresholding using standard deviation is a common method [...]
Splunking with Sysmon Part 3: Detecting PsExec in your Environment
PsExec is another powerful tool created by Windows Sysinternal. [...]
Your Splunk Guide for Smooth Sailing with CEF Field Extractions
One of the more common log formats you’ll run [...]
A Design with Humans in Mind: Adding Automation and Color Coding to the IT Workflow
Workflow is an essential part of a daily routine, from [...]
Using Splunk Enterprise Security to Look for Zerologon Exploit Attempts
A while back, Zerologon came along and helped everyone [...]
