analyzing-windows-event-logs-in-splunk
mukul975/Anthropic-Cybersecurity-Skills
Runs SPL queries against Windows Security, System, and Sysmon logs in Splunk to flag authentication attacks, privilege escalations, persistence, and lateral movement, helping SOC analysts, detection engineers, and responders build investigations and timelines.
