CYBERSECURITY THREAT INTELLIGENCE SYSTEM USING SPLUNK AS STIMULATION

The increasing frequency and sophistication of cyberattacks have made proactive threat detection a critical aspect of modern cybersecurity. This study presents the design and implementation of a Cybersecurity Threat Intelligence (CTI) Simulation System using Splunk Enterprise as a Security Information and Event Management (SIEM) platform. The project demonstrates how Splunk can be utilized to collect, analyze, and visualize security data for identifying and responding to threats in real time. Simulated attack scenarios such as brute-force attempts, malware infiltration, and insider threats were used to evaluate Splunk’s detection and correlation capabilities. External threat intelligence feeds, including AlienVault OTX and AbuseIPDB, were integrated to enrich analysis and improve detection accuracy. The system’s dashboards, search queries, and alert configurations provided actionable insights and reduced detection and response times significantly. The results indicate that Splunk effectively transforms raw log data into meaningful intelligence, supporting a proactive and intelligence-driven defense strategy. This research contributes to the practical understanding of CTI operations and highlights the importance of SIEM tools in enhancing organizational cybersecurity resilience.