Download

Skill UI

Browse and discover 9699+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Splunk , found 22 results

Default Newest Most Downloaded

Observability Engineering For Distributed Systems

observability-engineer

sickn33/antigravity-awesome-skills

Expert skill in designing and implementing comprehensive observability stacks for enterprise microservices. Covers advanced monitoring (Prometheus, Grafana), distributed tracing (Jaeger, OpenTelemetry), centralized logging (ELK, Splunk), and defining SLIs/SLOs. Ideal for ensuring high availability, mastering incident response, and performing reliability engineering on large-scale, distributed applications.

Centralized Log Aggregation

setting-up-log-aggregation

jeremylongshore/claude-code-plugins-plus-skills

Automates deployment and configuration of ELK, Loki, or Splunk log aggregation platforms by gathering requirements, crafting secure scalable configs, and producing deployment code for observability needs.

Splunk Log Analysis

analyzing-security-logs-with-splunk

mukul975/Anthropic-Cybersecurity-Skills

Uses Splunk Enterprise Security and SPL to correlate cross-source logs, trace authentication and lateral movement, monitor proxies and firewalls, and build incident timelines or detection rules when investigating compromises.

Windows Event Log Analysis

analyzing-windows-event-logs-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Splunk-based Windows event log analysis helps SOC analysts inspect Security, System, and Sysmon data to spot authentication attacks, privilege escalation, persistence, and lateral movement with MITRE-mapped SPL searches.

Splunk SPL Detection Rules

building-detection-rule-with-splunk-spl

mukul975/Anthropic-Cybersecurity-Skills

Guide to using Splunk Search Processing Language to craft correlation searches that aggregate logs, apply thresholds, detect anomalies, and enrich context so SOC analysts can spot brute-force, lateral movement, exfiltration, and other threats.

Sigma Detection Rule Builder

building-detection-rules-with-sigma

mukul975/Anthropic-Cybersecurity-Skills

Helps SOC teams author portable Sigma detection rules, validate syntax, and convert them into Splunk, Elastic, or Sentinel queries while tagging MITRE ATT&CK coverage.

Incident Response Dashboard

building-incident-response-dashboard

mukul975/Anthropic-Cybersecurity-Skills

Creates real-time incident response dashboards across Splunk, Elastic, or Grafana so SOC analysts and leaders can monitor active incidents, containment status, IOC spread, and response timelines for coordination, briefing, and post-incident reporting.

Splunk Threat Intelligence Enrichment

building-threat-intelligence-enrichment-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Automate Splunk ES threat intelligence enrichment by ingesting external feeds, normalizing IOCs into KV Store collections, and running lookup-based correlation searches so SOC analysts get immediate context from multiple sources.

Service Principal Abuse Detection

detecting-azure-service-principal-abuse

mukul975/Anthropic-Cybersecurity-Skills

Detect and investigate Azure service principal abuse by hunting for credential changes, role escalations, admin consent bypasses, and suspicious enumeration with Sentinel/Splunk/Security API workflows to expose persistent threats.

Kerberos Golden Ticket Detection

detecting-golden-ticket-forgery

mukul975/Anthropic-Cybersecurity-Skills

Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 RC4 downgrades, orphaned TGS requests, and abnormal lifetimes in Splunk or Elastic SIEM to alert on credential-theft attacks.

Splunk Lateral Movement Detection

detecting-lateral-movement-with-splunk

mukul975/Anthropic-Cybersecurity-Skills

Guide to hunting lateral movement using Splunk SPL against Windows auth, SMB, and remote service abuse logs to trace credential theft, anomalous access, and threat paths for incident response.

Detecting Pass-the-Ticket

detecting-pass-the-ticket-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detect Kerberos Pass-the-Ticket attacks by correlating Windows Security Event IDs 4768, 4769, and 4771 inside Splunk or Elastic SIEM, flagging ticket reuse, RC4 downgrades, and unusual service ticket volumes for SOC hunting and coverage validation.

Language