https://github.com/inodee/threathunting-spl

Splunk code (SPL) for serious threat hunters and detection engineers.

rules siem spl splunk threat-hunting use-case

Last synced: 15 Feb 2026

https://github.com/inodee/spl-to-kql

The idea is simply to save some quick notes that will make it easier for Splunk users to leverage KQL (Kusto), especially giving projects requiring both technologies (Splunk and Azure/Sentinel) or any other hybrid environments. Feel free to add/suggest entries.

Last synced: 22 Mar 2025