1.不同版本splunk下載
https://www.splunk.com/page/previous_releases#x86_64windows
2.插件下載地址：
https://splunkbase.splunk.com/apps/
3.github介紹
https://github.com/olafhartong/ThreatHunting
4.word版詳細教程
https://www.linkedin.com/pulse/attckized-splunk-kirtar-oza-cissp-cisa-ms-/
5.sysmon下載
https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon
6.sysmon日誌路徑C:\Windows\System32\winevt\Logs
7.
.8
sysmon (Event_ID=12 OR Event_ID=13 OR Event_ID=14) (registry_path="\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls" OR registry_path="\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls")
9.
