The Splunk Attack Range is an open-source project maintained by the Splunk Threat Research Team. It builds instrumented cloud (AWS, Azure) and local environments (Virtualbox), simulates attacks, and forwards the data into a Splunk instance. This environment can then be used to develop and test the effectiveness of detections.
Features
- The user is able to quickly build a small lab infrastructure as close as possible to a production environment
- Documentation available
- The Attack Range performs attack simulation using different engines such as Atomic Red Team or Caldera in order to generate real attack data
- It integrates seamlessly into any Continuous Integration / Continuous Delivery (CI/CD) pipeline to automate the detection rule testing process
- Istall directly on Windows, Linux, or MacOS
- Examples included
Categories
Penetration TestingLicense
Apache License V2.0Follow Splunk Attack Range
Other Useful Business Software
Auth0 for AI Agents now in GA
Connect your AI agents to apps and data more securely, give users control over the actions AI agents can perform and the data they can access, and enable human confirmation for critical agent actions.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of Splunk Attack Range!