# Siems and EDR

- [Splunk](/barics-knowledge-base/development/siems-and-edr/splunk.md)
- [Install](/barics-knowledge-base/development/siems-and-edr/splunk/install.md)
- [Splunk forwarder](/barics-knowledge-base/development/siems-and-edr/splunk/splunk-forwarder.md)
- [Install forwarder via Powershell](/barics-knowledge-base/development/siems-and-edr/splunk/splunk-forwarder/install-forwarder-via-powershell.md)
- [Windows Defender event-viewer and logs](/barics-knowledge-base/development/siems-and-edr/splunk/splunk-forwarder/windows-defender-event-viewer-and-logs.md)
- [Powershell History Logs](/barics-knowledge-base/development/siems-and-edr/splunk/splunk-forwarder/powershell-history-logs.md)
- [Log Locations](/barics-knowledge-base/development/siems-and-edr/splunk/log-locations.md)
- [Search Queries](/barics-knowledge-base/development/siems-and-edr/splunk/search-queries.md)
- [Windows Detailed activity properties in the audit log](/barics-knowledge-base/development/siems-and-edr/splunk/search-queries/windows-detailed-activity-properties-in-the-audit-log.md)
- [SPL Breakdown](/barics-knowledge-base/development/siems-and-edr/splunk/search-queries/spl-breakdown.md)
- [SPL](/barics-knowledge-base/development/siems-and-edr/splunk/search-queries/spl.md)
- [Create a email alert](/barics-knowledge-base/development/siems-and-edr/splunk/create-a-email-alert.md)
- [Monitoring a file from a PC](/barics-knowledge-base/development/siems-and-edr/splunk/monitoring-a-file-from-a-pc.md)
- [Resources](/barics-knowledge-base/development/siems-and-edr/splunk/resources.md)
- [Detecting Business Email Compromise Using Splunk](/barics-knowledge-base/development/siems-and-edr/splunk/resources/detecting-business-email-compromise-using-splunk.md)
- [Install Splunk AI Assistant for SPL](/barics-knowledge-base/development/siems-and-edr/splunk/resources/install-splunk-ai-assistant-for-spl.md)
- [Turning on File Folder Auditing](/barics-knowledge-base/development/siems-and-edr/splunk/resources/turning-on-file-folder-auditing.md)
- [Uploading lookup table csv file](/barics-knowledge-base/development/siems-and-edr/splunk/resources/uploading-lookup-table-csv-file.md)
- [Export Splunk results to CSV file](/barics-knowledge-base/development/siems-and-edr/splunk/resources/export-splunk-results-to-csv-file.md)
- [Open-source detection rules like SigmaRules and Splunk ESCU rules](/barics-knowledge-base/development/siems-and-edr/splunk/resources/open-source-detection-rules-like-sigmarules-and-splunk-escu-rules.md)
- [Splunk research Detection, Analytics Playbooks and stats](/barics-knowledge-base/development/siems-and-edr/splunk/resources/splunk-research-detection-analytics-playbooks-and-stats.md)
- [Teams Detailed activity properties in the audit log](/barics-knowledge-base/development/siems-and-edr/splunk/resources/teams-detailed-activity-properties-in-the-audit-log.md)
- [Creating Graphs and Dashboards](/barics-knowledge-base/development/siems-and-edr/splunk/creating-graphs-and-dashboards.md)
- [Splunkbase Apps](/barics-knowledge-base/development/siems-and-edr/splunk/splunkbase-apps.md)
- [Splunkbase App Values](/barics-knowledge-base/development/siems-and-edr/splunk/splunkbase-apps/splunkbase-app-values.md)
- [Verkada Splunk Integration](/barics-knowledge-base/development/siems-and-edr/splunk/splunkbase-apps/verkada-splunk-integration.md)
- [Microsoft teams add-on for Splunk](/barics-knowledge-base/development/siems-and-edr/splunk/splunkbase-apps/microsoft-teams-add-on-for-splunk.md)
- [Add Bit-warden to Splunk](/barics-knowledge-base/development/siems-and-edr/splunk/splunkbase-apps/add-bit-warden-to-splunk.md)
- [Top Splunk Apps](/barics-knowledge-base/development/siems-and-edr/splunk/splunkbase-apps/top-splunk-apps.md)
- [MITRE ATT\&CK App for Splunk](/barics-knowledge-base/development/siems-and-edr/splunk/splunkbase-apps/mitre-att-and-ck-app-for-splunk.md)
- [Splunk Enterprise Security](/barics-knowledge-base/development/siems-and-edr/splunk/splunkbase-apps/splunk-enterprise-security.md)
- [Common Information Model (CIM) normalizing data sources in splunk](/barics-knowledge-base/development/siems-and-edr/splunk/splunkbase-apps/common-information-model-cim-normalizing-data-sources-in-splunk.md)
- [Splunk App for Lookup File Editing](/barics-knowledge-base/development/siems-and-edr/splunk/splunkbase-apps/splunk-app-for-lookup-file-editing.md)
- [Infosec](/barics-knowledge-base/development/siems-and-edr/splunk/splunkbase-apps/infosec.md)
- [Threat Hunting Essentials](/barics-knowledge-base/development/siems-and-edr/splunk/splunkbase-apps/threat-hunting-essentials.md)
- [Joe Sandbox v2](/barics-knowledge-base/development/siems-and-edr/splunk/splunkbase-apps/joe-sandbox-v2.md)
- [Create/Modify User account](/barics-knowledge-base/development/siems-and-edr/splunk/create-modify-user-account.md)
- [Stop auto logout](/barics-knowledge-base/development/siems-and-edr/splunk/stop-auto-logout.md)
- [Splunk Deployment Server](/barics-knowledge-base/development/siems-and-edr/splunk/splunk-deployment-server.md)
- [Deployment Resources](/barics-knowledge-base/development/siems-and-edr/splunk/splunk-deployment-server/deployment-resources.md)
- [Other Types of Deployment Servers that can be used](/barics-knowledge-base/development/siems-and-edr/splunk/splunk-deployment-server/other-types-of-deployment-servers-that-can-be-used.md)
- [Calling Rest API from Splunk](/barics-knowledge-base/development/siems-and-edr/splunk/calling-rest-api-from-splunk.md)
- [Splunk Python Lookup Script app Development](/barics-knowledge-base/development/siems-and-edr/splunk/splunk-python-lookup-script-app-development.md)
- [(Settings) Data Inputs + Scripting Examples](/barics-knowledge-base/development/siems-and-edr/splunk/settings-data-inputs-+-scripting-examples.md)
- [Splunk Soar](/barics-knowledge-base/development/siems-and-edr/splunk/splunk-soar.md)
- [Install SOAR](/barics-knowledge-base/development/siems-and-edr/splunk/splunk-soar/install-soar.md)
- [Connect Splunk Enterprise With SOAR](/barics-knowledge-base/development/siems-and-edr/splunk/splunk-soar/connect-splunk-enterprise-with-soar.md)
- [Wazuh](/barics-knowledge-base/development/siems-and-edr/wazuh.md)
- [Default register agent config](/barics-knowledge-base/development/siems-and-edr/wazuh/default-register-agent-config.md)
- [Monitoring process to look for a app running](/barics-knowledge-base/development/siems-and-edr/wazuh/monitoring-process-to-look-for-a-app-running.md)
- [Alert number in wazuh](/barics-knowledge-base/development/siems-and-edr/wazuh/alert-number-in-wazuh.md)
- [Custom Rules](/barics-knowledge-base/development/siems-and-edr/wazuh/custom-rules.md)
- [Adding windows defender logs](/barics-knowledge-base/development/siems-and-edr/wazuh/adding-windows-defender-logs.md)
- [Malware test files](/barics-knowledge-base/development/siems-and-edr/wazuh/malware-test-files.md)
- [Wazuh training](/barics-knowledge-base/development/siems-and-edr/wazuh/wazuh-training.md)
- [Wazuh remote commands endpoint agent](/barics-knowledge-base/development/siems-and-edr/wazuh/wazuh-remote-commands-endpoint-agent.md)
- [Wazuh to allow ssh to machine](/barics-knowledge-base/development/siems-and-edr/wazuh/wazuh-to-allow-ssh-to-machine.md)
- [Wazuh osquery](/barics-knowledge-base/development/siems-and-edr/wazuh/wazuh-osquery.md)
- [Wazuh manager server and agent upgrade](/barics-knowledge-base/development/siems-and-edr/wazuh/wazuh-manager-server-and-agent-upgrade.md)
- [Wazuh download](/barics-knowledge-base/development/siems-and-edr/wazuh/wazuh-download.md)
- [Wazuh API](/barics-knowledge-base/development/siems-and-edr/wazuh/wazuh-api.md)
- [Wazuh agent (edit)](/barics-knowledge-base/development/siems-and-edr/wazuh/wazuh-agent-edit.md)
- [Custom Log File](/barics-knowledge-base/development/siems-and-edr/wazuh/custom-log-file.md)
- [location of config file](/barics-knowledge-base/development/siems-and-edr/wazuh/location-of-config-file.md)
- [Make a user in wazuh and adding perms](/barics-knowledge-base/development/siems-and-edr/wazuh/make-a-user-in-wazuh-and-adding-perms.md)
- [Proof of concept guide](/barics-knowledge-base/development/siems-and-edr/wazuh/proof-of-concept-guide.md)
- [Wazuh endpoint agent custom config elements](/barics-knowledge-base/development/siems-and-edr/wazuh/wazuh-endpoint-agent-custom-config-elements.md)
- [Wazuh debug logs](/barics-knowledge-base/development/siems-and-edr/wazuh/wazuh-debug-logs.md)
- [Wazuh email notification](/barics-knowledge-base/development/siems-and-edr/wazuh/wazuh-email-notification.md)
- [Wazuh moniter office 360](/barics-knowledge-base/development/siems-and-edr/wazuh/wazuh-moniter-office-360.md)
- [Wazuh making and modifying user groups](/barics-knowledge-base/development/siems-and-edr/wazuh/wazuh-making-and-modifying-user-groups.md)
- [Wazuh Siem/EDR](/barics-knowledge-base/development/siems-and-edr/wazuh/wazuh-siem-edr.md)
- [Gravwell](/barics-knowledge-base/development/siems-and-edr/gravwell.md)
- [Queries](/barics-knowledge-base/development/siems-and-edr/gravwell/queries.md)
- [Gravwell Docker Install](/barics-knowledge-base/development/siems-and-edr/gravwell/gravwell-docker-install.md)
- [OpenEDR](/barics-knowledge-base/development/siems-and-edr/openedr.md)
- [Data for SIEM](/barics-knowledge-base/development/siems-and-edr/data-for-siem.md)
- [IP from Companies](/barics-knowledge-base/development/siems-and-edr/data-for-siem/ip-from-companies.md)
- [Microsoft](/barics-knowledge-base/development/siems-and-edr/data-for-siem/ip-from-companies/microsoft.md)
- [Google](/barics-knowledge-base/development/siems-and-edr/data-for-siem/ip-from-companies/google.md)
- [misp-warninglists and tools to scrape](/barics-knowledge-base/development/siems-and-edr/data-for-siem/ip-from-companies/misp-warninglists-and-tools-to-scrape.md)
- [Azure cloud IP Addresses](/barics-knowledge-base/development/siems-and-edr/data-for-siem/ip-from-companies/azure-cloud-ip-addresses.md)
- [T-mobile IP Geo location](/barics-knowledge-base/development/siems-and-edr/data-for-siem/ip-from-companies/t-mobile-ip-geo-location.md)
- [Verizon Wireless IP Geo Location](/barics-knowledge-base/development/siems-and-edr/data-for-siem/ip-from-companies/verizon-wireless-ip-geo-location.md)
- [VPN IP](/barics-knowledge-base/development/siems-and-edr/data-for-siem/vpn-ip.md)
- [VPN (nord, proton, ...)](/barics-knowledge-base/development/siems-and-edr/data-for-siem/vpn-ip/vpn-nord-proton-....md)
- [Proton VPN and Data Centers](/barics-knowledge-base/development/siems-and-edr/data-for-siem/vpn-ip/proton-vpn-and-data-centers.md)
- [IP Block-Lists](/barics-knowledge-base/development/siems-and-edr/data-for-siem/ip-block-lists.md)
- [domainthreat](/barics-knowledge-base/development/siems-and-edr/data-for-siem/ip-block-lists/domainthreat.md)
- [Blocklist.de](/barics-knowledge-base/development/siems-and-edr/data-for-siem/ip-block-lists/blocklist.de.md)
- [Scam-Blocklist](/barics-knowledge-base/development/siems-and-edr/data-for-siem/ip-block-lists/scam-blocklist.md)
- [Blocklist-ipsets](/barics-knowledge-base/development/siems-and-edr/data-for-siem/ip-block-lists/blocklist-ipsets.md)
- [IP blocklist lists](/barics-knowledge-base/development/siems-and-edr/data-for-siem/ip-block-lists/ip-blocklist-lists.md)
- [Malicious User Agents](/barics-knowledge-base/development/siems-and-edr/data-for-siem/malicious-user-agents.md)
- [User Agents](/barics-knowledge-base/development/siems-and-edr/data-for-siem/malicious-user-agents/user-agents.md)
- [Proofpoint Emerging Threats Rules](/barics-knowledge-base/development/siems-and-edr/data-for-siem/proofpoint-emerging-threats-rules.md)
