Popular repositories Loading

1. hafnium-exchange-splunk-csvs hafnium-exchange-splunk-csvs Public

   IOCs found exploiting CVE-2021-26855 thanks to info from Volexity and MS and Huntresslabs.

   6 8

2. splunk-spectre-meltdown-uf-script splunk-spectre-meltdown-uf-script Public

   A script modified from speed47 to provide KV-pair results into a Splunk UF scripted input

   Shell 5

3. TA-Drovorub TA-Drovorub Public

   Simple Splunk UF detection for Drovorub kernel module

   Shell 4

4. TA-hrs TA-hrs Public

   Batchfile 2

5. TA-remote_endpoint_info TA-remote_endpoint_info Public

   A Splunk TA to grab local endpoint metadata using the UF

   Python 1

6. TA-rcanary TA-rcanary Public

   Simple ransomware canary for Splunk UF on Windows

   Batchfile 1 1