Splunk Security Content
Access a repository of Analytic Stories and security guides mapped to industry frameworks, with Splunk searches, machine learning algorithms, and playbooks for threat detection and response.
Access a repository of Analytic Stories and security guides mapped to industry frameworks, with Splunk searches, machine learning algorithms, and playbooks for threat detection and response.
Checked October 2026.
Welcome to the Splunk Security Content. This project provides access to a repository of Analytic Stories, security guides that offer insights into tactics, techniques, and procedures (TTPs) mapped to the MITRE ATT&CK Framework, Lockheed Martin Cyber Kill Chain, and CIS Controls.
It includes Splunk searches, machine learning algorithms, and Splunk Phantom playbooks designed to work together for threat detection, investigation, and response. Additionally, there are sister projects like Splunk Attack Range, an attack simulation lab, and Contentctl, a tool for building, testing, and packaging content for distribution.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Splunk Security Content: features, pricing and alternatives.
Splunk Security Content is a product in the Detection Engineering category. It covers MITRE ATT&CK and Splunk.
Splunk Security Content is free. Download and setup instructions are at https://github.com/splunk/security_content/.
Alternatives to Splunk Security Content listed on CybersecTools:
Compare all Splunk Security Content alternatives at https://cybersectools.com/alternatives/splunk-security-content
Splunk Security Content is available as a cloud service. It is listed for small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A tool that generates Yara rules from training data using logistic regression and random forest classifiers.
Early-access threat detection platform targeting static & manual detection gaps.
An open-source platform that builds instrumented environments, simulates attacks, and integrates with Splunk for detection rule development and testing.
Open source Suricata-based NDR system with threat detection and analysis
A tool for deep analysis of malicious files using ClamAV and YARA rules, with features like scoring suspect files, building visual tree graphs, and extracting specific patterns.
A strings statistics calculator for YARA rules to aid malware research.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best MDR Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
