Results for “sling-distribution”

Detect IBD-style Distribution Days for QQQ/SPY, track 25-session expiration and 5% invalidation, count d5/d15/d25 clusters, classify market risk, and emit TQQQ/QQQ exposure recommendations.

Detects credential stuffing attacks by analyzing authentication logs for login velocity anomalies, ASN diversity, password spray patterns, and geographic distribution of failed logins using statistical analysis on Splunk or raw log data.

Detect adversary lateral movement across networks using Splunk SPL queries against Windows authentication logs, SMB traffic, and remote service abuse.