What an Agentic Attack Looks Like in Splunk Attack Range
Splunk, Thursday, October 22nd, 2026
Splunk's threat research team simulates an offensive AI agent swarm in Splunk Attack Range to see how agentic attacks appear in telemetry.
A Splunk Threat Research Team member set out to see what an agentic swarm attack looks like in Splunk.
Using a modified Splunk Attack Range lab with a Windows domain controller, workstation and Linux NGINX server, he built an offensive swarm of five agents using Hermes.
He also tested a defensive agentic framework he has been developing.
The post maps each agent's role, objective and tasks and shows the resulting telemetry.