Skill UI

This guide details how to write advanced correlation searches using Splunk's Search Processing Language (SPL). It covers techniques like threshold-based detection, sequence analysis, and anomaly detection to identify sophisticated security threats (e.g., brute force, data exfiltration, lateral movement) in a Security Operations Center (SOC) environment. Mastery of SPL is essential for closing SIEM detection gaps and ensuring compliance.

An autonomous research agent that plans complex investigations using Directed Acyclic Graphs (DAGs). It executes sub-questions in parallel, performs gap analysis, and iteratively refines findings before synthesizing a comprehensive, structured report. Ideal for deep market analysis, academic literature reviews, or complex problem-solving requiring multiple data sources.