Description

An investigation-focused Splunk dashboard designed for active or post-incident analysis.

Includes:

• Timeline reconstruction

• Host-based activity correlation

• IOC-driven pivoting

• Kill-chain visualization

Used by SOC teams during live incidents.