Splunk Attack Range
Forensics & Incident ResponseA tool that builds instrumented cloud labs, simulates attacks, and streams telemetry into Splunk for detection testing.
Features
- Builds production‑like cloud environments (AWS, Azure, GCP) via Terraform and Ansible
- Runs attack simulations (e.g., Atomic Red Team) to generate real telemetry
- Forwards all generated data into Splunk for detection development
Recent releases
View all 4 releases →
v4.0.0
Breaking risk
Breaking changes
- Local deployment via VirtualBox/Vagrant discontinued; use Ludus as alternative
Notable features
- SnapAttack CapAttack PowerShell capture agent integration
- Google Cloud Platform support alongside AWS and Azure
- Version-tagged Docker containers for reproducible testing
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
docker
