Botnet App for Splunk

The app is designed to introduce some concepts around Machine Learning, particularly for classification and anomaly detection use cases and also help users develop a model for detecting botnets using NetFlow logs. It is intended to be used on network traffic flow logs, such as NetFlow. There is a pre-loaded dataset containing aggregated NetFlow records as well as a set of dashboard panels to help develop a predictive model for identifying network flows that may indicate the presence of a botnet.