correlation-search▌
2 indexed skills · max 10 per page
building-detection-rule-with-splunk-spl
mukul975/Anthropic-Cybersecurity-Skills · building-detection-rule-with-splunk-spl
Build effective detection rules using Splunk Search Processing Language (SPL) correlation searches to identify security threats in SOC environments.
triaging-security-alerts-in-splunk
mukul975/Anthropic-Cybersecurity-Skills · triaging-security-alerts-in-splunk
Triages security alerts in Splunk Enterprise Security by classifying severity, investigating notable events, correlating related telemetry, and making escalation or closure decisions using SPL queries and the Incident Review dashboard. Use when SOC analysts face queued alerts from correlation searches, need to prioritize investigation order, or must document triage decisions for handoff to Tier 2/3 analysts.