Hands-on Splunk BOTS investigations showcasing threat hunting, SPL queries, and detection logic.

Analyzing IOCs in the BOTSv3 Dataset

Splunk lab for UNSW COMP6845

Splunk BOTSv3 SOC investigation - CoinMiner drive-by attack on Frothly Brewing with full MITRE ATT&CK, NIST CSF, NIST 800-53, and CIS Controls v8 framework mappings.