A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

Labs for Practical Malware Analysis & Triage

SQLI labs to test error based, Blind boolean based, Time based.

Splunk Security Content

Small and highly portable detection tests based on MITRE's ATT&CK.

Damn Vulnerable Web Application (DVWA)

Define a complete security baseline and monitor the baseline's rules. The definition of the baseline should be done in Hiera. The purpose of the module is to give the ability to setup a complete security baseline which not necessarily have to stick to industry security guides like the CIS benchmarks.