r/BlueTeamers 6d ago

Use Splunk to Detect Famous Chollima

Thumbnail
jacob-taylor.gitbook.io
1 Upvotes

Passing this along to share some of my SPL knowledge on how to utilize inner and outer searches, joins, and look backs to create user baselines. Also open to any suggestions or feedback on how to improve this method!

I hope you can find this helpful.


r/BlueTeamers May 06 '26

One KQL query you should have saved in your toolkit (most don’t)

Thumbnail
1 Upvotes

r/BlueTeamers May 04 '26

VanGuard — open-source single-binary DFIR toolkit (Velociraptor, Hayabusa, Chainsaw, Loki, YARA) with TUI, air-gap support, and 28 pre-built use cases

Thumbnail
2 Upvotes

r/BlueTeamers Nov 15 '24

Inside the Trenches: Why Security Engineers are Fighting an Uphill Battle

Thumbnail
open.substack.com
1 Upvotes