Pinned Loading

1. windows_bruteforce_detection_elastic_siem windows_bruteforce_detection_elastic_siem Public

   Elastic SIEM project detecting Windows brute-force attacks (Event ID 4625) using Winlogbeat and threshold-based detection rules.

   1

2. splunk-windows-authentication-monitoring splunk-windows-authentication-monitoring Public

   Security monitoring project using Splunk SIEM to analyze Windows Security Event Logs and detect authentication activity (Event ID 4624 & 4625).

   1

3. EDR-Sysmon-Splunk EDR-Sysmon-Splunk Public

   Endpoint Detection & Response (EDR) using Sysmon + Splunk