Threat Hunting
SPL Hunt Query Library
60+ production-ready Splunk SPL hunt queries organised by MITRE technique with required log sources, tuning guidance, and what a positive looks like.
Coming next
This tool is being built. Return soon — or visit the Threat Hunting hub for all available tools.