Analyzing IOCs in the BOTSv3 Dataset
-
Updated
Nov 20, 2025
Analyzing IOCs in the BOTSv3 Dataset
Hands-on Splunk BOTS investigations showcasing threat hunting, SPL queries, and detection logic.
Validate SOAR playbooks against BOTS v3 evidence using Splunk MCP, MITRE ATT&CK, VirusTotal, and approval-gated dry runs.
Splunk BOTSv3 SOC investigation - CoinMiner drive-by attack on Frothly Brewing with full MITRE ATT&CK, NIST CSF, NIST 800-53, and CIS Controls v8 framework mappings.
Lab Splunk Enterprise dengan dataset log Boss of the SOC (BOTS) v1, v2, dan v3 untuk latihan threat hunting dan analisis insiden.
SOC investigation of browser based Monero mining in the Splunk BOTSv3 dataset — CPU anomaly to DNS confirmation to delivery vector, plus the endpoint detection gap that let it run.
To associate your repository with the botsv3 topic, visit your repo's landing page and select "manage topics."