Splunk Adaptive Response

Here is a code repo for some of the Adaptive Response rules we've utilized within Splunk's Enterprise Security module.

In the majority of these ARs, SN stands for ServiceNow since that is the primary ticketing system utilized.