splunk 开源项目推荐（2,688 个）

openobserve /openobserve

开源可观测性平台，面向日志、指标、链路追踪、RUM（Web、Android、iOS）、会话回放、管道、SLO 和 LLM 可观测性。它是 Datadog、Splunk 和 Elasticsearch 的成熟、简单且高性能替代方案，存储成本低 140 倍，并支持单二进制部署。

SigmaHQ /sigma

Sigma 主规则仓库

graphistry /pygraphistry

PyGraphistry is a Python library to quickly load, shape, embed, and explore big graphs with the GPU-accelerated Graphistry visual graph analyzer

siglens /siglens

100x Efficient Log Management than Splunk 🚀 Reduce your observability cost by 90%

splunk /security_content

Splunk Security Content

orlangure /gnomock

借助临时 Docker 容器测试代码，无需编写模拟；只需几行代码即可搭建常用服务 📦 无需 bash，无需 yaml，只用代码 💻

infosecB /awesome-detection-engineering

检测工程是网络安全防御计划的一项战术功能，涉及检测控制的设计、实施和操作，目标是在恶意或未经授权的活动对个人或组织产生负面影响之前主动识别该活动。

domainaware /parsedmarc

A Python package and CLI for parsing aggregate and forensic DMARC reports

olafhartong /ThreatHunting

A Splunk app mapped to MITRE ATT&CK to guide your threat hunts

reidmorrison /semantic_logger

Semantic Logger is a high-performance, asynchronous structured logging framework for Ruby and Rails.

zentralopensource /zentral

Zentral is a control plane for secure, observable Apple endpoints in enterprises. Configure, observe, and enforce the desired state of every Apple endpoint. Manage that desired state as code through GitOps and Terraform.

splunk /splunk-sdk-python

Splunk Software Development Kit for Python

mthcht /ThreatHunting-Keywords

Awesome list of keywords and artifacts for Threat Hunting sessions

ANSSI-FR /ADTimeline

Timeline of Active Directory changes with replication metadata

blackhillsinfosec /EventLogging

Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.

Dicklesworthstone /automatic_log_collector_and_analyzer

Replace Splunk in your small company with this one weird trick!

splunk /splunk-connect-for-kubernetes

Helm charts associated with kubernetes plug-ins

ecstatic-nobel /OSweep

Don't Just Search OSINT. Sweep It.

inodee /threathunting-spl

Splunk code (SPL) for serious threat hunters and detection engineers.

lynxbase /lynxdb

A lightweight schema-on-read analytics in a single binary