Rod Soto
Using Splunk to Monitor the Security of MCP Servers
Learn how to use Splunk to monitor MCP Server security.
How to Use Splunk to Monitor Security of Local LLMs (Part II)
Learn how to use Splunk to monitor and defend your local Large Language Models (LLMs).
How To Use Splunk To Monitor Security of Local LLMs (Part I)
Learn how to use Splunk to monitor the security of local Large Language Models (LLMs) like Llama and GPT4ALL.
Approaching Linux Post-Exploitation with Splunk Attack Range
An introduction to linux post exploitation simulation and threat detection using Splunk Attack Range and linux Sysmon.
Detecting Ryuk Using Splunk Attack Range
A new alert, Ransomware Activity Targeting the Healthcare and Public Health Sector, issued by the CISA poses ongoing and possible imminent attacks against the healthcare sector. Learn how you can detect the Ryuk ransomware as payload with Splunk Attack Range.
Detecting Google Cloud Platform OAuth Token Abuse Using Splunk
Google Cloud Platform's Identity Access Management (IAM) permissions can be used to move laterally and escalate privileges. Learn how to detect GCP OAuth token abuse and remediate these events with Splunk.
