splunk-observability-cloud

Deploy Cisco AI Pods with Ansible and Python

This lab focused on improving Windows endpoint visibility by installing Sysmon and forwarding its event data into Splunk Cloud for centralized monitoring and investigation. Sysmon provides detailed telemetry about system activity such as process creation, parent processes, command-line execution, and other endpoint events.