Splunk BOTS investigation of a 2018 North Korean attack on Frothly beer company. Traced complete attack chain from reconnaissance to 31.6 MB data exfiltration in 90 seconds using 9 Splunk queries. Incident response portfolio with methodology, queries, timeline, and findings.
security portfolio log-analysis splunk incident-response dfir cybersecurity threat-hunting soc blue-team attack-analysis bots-dataset
-
Updated
Sep 30, 2026