botsv1

Here are 9 public repositories matching this topic...

YoussefMAbbas / Splunk-Bots-Writeups

Hands-on Splunk BOTS investigations showcasing threat hunting, SPL queries, and detection logic.

Updated Mar 2, 2026

AKINOLASELIM / boss-of-the-soc-v1-writeup

SOC investigation walkthrough analyzing a simulated Joomla website defacement using Splunk — log correlation across firewall, stream, and web traffic to trace attacker recon, exploitation, and credential brute forcing (BOTS v1 dataset)

splunk incident-response cybersecurity threat-hunting siem spl blue-team botsv1

Updated Sep 26, 2026

emilebarnard242 / splunk-lab-portfolio

Star

Hands-on Splunk lab work covering SPL querying, alerting, and dashboard building using the BOTSv1 dataset and linux_secure sourcetype, progressing through the full Cyber Kill Chain from reconnaissance to actions on objectives.

splunk cybersecurity threat-hunting siem blue-team cyber-kill-chain soc-analyst botsv1

Updated Apr 4, 2026

d-osei / Cybersecurity-Portfolio

Star

A phased cybersecurity portfolio demonstrating Log Analysis, Threat Hunting (BOTSv1), and AI/ML Anomaly Detection. Built with Python, Splunk, and Pandas.

log-analysis scikit-learn jupyter-notebook pandas malware-analysis network-security splunk-enterprise threat-intel machine-learning-security botsv1

Updated Dec 22, 2025

fahmipentest / Splunk-BOTS

Star

Lab Splunk Enterprise dengan dataset log Boss of the SOC (BOTS) v1, v2, dan v3 untuk latihan threat hunting dan analisis insiden.

splunk threat-hunting siem splunk-enterprise blue-team splunk-addon botsv3 botsv1 botsv2

Updated Oct 15, 2026

loxsec / soc-case-files

Star

SIEM & threat detection case files documenting SSH brute-force attacks and endpoint security investigations in Splunk

splunk linux-administration mitre-attack threat-detection security-operations detection-engineering soc-analyst botsv1

Updated Sep 19, 2026

YOUY0U / Splunk-Boss-of-the-SOC-v1-Writeups

Star

Splunk Boss of the SOC v1 investigation writeups covering website defacement and Cerber ransomware, with SPL queries, IOC analysis, MITRE ATT&CK mapping, OSINT pivots, and supporting screenshots.

osint splunk incident-response cybersecurity threat-hunting siem digital-forensics soc blue-team mitre-attack botsv1

Updated Jul 16, 2026

dhruvshah-cyber / splunk-siem-homelab

Star

SOC monitoring environment built with Splunk Enterprise — detection rules for brute force, privilege escalation, and account lockout using real Windows event logs and BOTSv1 attack data

windows splunk incident-response cybersecurity threat-hunting siem soc blue-team mitre-attack botsv1

Updated Mar 21, 2026

Akshit0203 / splunk-botsv1-incident-investigation

Sponsor

Star

SOC incident-response & threat-hunting investigation of an APT web-server compromise in Splunk's Boss of the SOC (BOTS) v1 dataset — full attack-chain reconstruction with SPL, IOC enrichment, and MITRE ATT&CK mapping.

ioc log-analysis splunk incident-response dfir cybersecurity suricata sysmon threat-hunting siem spl soc threat-intelligence blue-team mitre-attack security-monitoring botsv1

Updated Oct 11, 2026

Add this topic to your repo

To associate your repository with the botsv1 topic, visit your repo's landing page and select "manage topics."

Learn more