splunk-spl

QuoLab add-on for Splunk

🛠️ DevForge - A premium, self-hosted suite of client-side developer tools including Crypto, Converters, Web Dev, K8s, CI/CD, DevOps, and AI utilities.

Enterprise-grade ICT infrastructure monitoring and security operations platform with Splunk. Demonstrates threat detection, Kenya Data Protection Act 2019 compliance, and 80% false positive reduction through alert tuning.

Splunk SPL interpreter for Apache Zeppelin (WIP)

Brute-force detection lab using Splunk SIEM — SPL detection rules, custom dashboard, and MITRE ATT&CK T1110/T1078 mapping

A completely free, AI-powered assistant that translates natural language SOC analyst questions into precise Splunk SPL, Elastic KQL, Microsoft Sentinel KQL, and Wazuh SIEM queries. Built for threat hunters.

Web attack simulation lab — SQLi, XSS, LFI, Brute Force against DVWA with Splunk detection rules and MITRE ATT&CK mapping

A hands-on SOC investigation using Splunk, Sysmon and Windows Security telemetry to detect, investigate and respond to simulated suspicious PowerShell activity.

Custom Splunk SIEM — brute-force and failed-activity detection, HTTP POST-volume and non-US traffic alerts, incident response (UofT Cybersecurity)

Splunk SPL/MLTK predictive resource alerts with Webex webhooks and a tested Python forecast demo.

Monitor and secure ICT infrastructure using Splunk for real-time IT observability and threat detection aligned with compliance standards.