Rainy weekend experiment: anyone else ever thought of using Hayabusa from @SecurityYamato as a poor's man endpoint detection agent for the SOC ?
- Splunk4DFIR has now a dedicated dashboard + sigma rules support for GCP Audit logs. Thanks @hackthebox_eu for the MisCloud Sherlock dataset.
- Splunk4DFIR has now a dashboard to get quickly started with aws cloudtrail logs.
- Splunk4DFIR update: - pre-configured syslog inputs - linux builtin and webserver sigma rules support - web access logs dashboard
