Build automated IOC enrichment pipelines in Splunk Enterprise Security by ingesting threat feeds into KV Store collections and correlating them against security events via lookup tables, modular inputs, and the Threat Intelligence Framework. Use when wiring threat intel into Splunk correlation searches to flag IOC matches and cut SOC triage time.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-threat-intelligence-enrichment-in-splunknpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-threat-intelligence-enrichment-in-splunk -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-threat-intelligence-enrichment-in-splunk -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/building-threat-intelligence-enrichment-in-splunkgh skill install mukul975/Anthropic-Cybersecurity-Skills building-threat-intelligence-enrichment-in-splunkgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/building-threat-intelligence-enrichment-in-splunk ~/.claude/skills/building-threat-intelligence-enrichment-in-splunk # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/building-threat-intelligence-enrichment-in-splunk ~/.agents/skills/building-threat-intelligence-enrichment-in-splunk # Codex, Cursor, Gemini CLI, Copilot, OpenCode