http://motasem-notes.net/en/?p=4144
Cyber Incident Response with Splunk | TryHackMe Incident Handling with Splunk