Stories & Data Sources
Two Splunk security-content reference catalogs: Analytic Stories bundle library detections by threat, and Data Sources describe the telemetry those detections require to fire.
Analytic Stories
/forge/stories browses Splunk ESCU's Analytic Stories — threat-based bundles of library detections. Each story card shows its detection count, tactic and description; open one for the narrative, its ATT&CK techniques, and the member detections, each linking into the content library. Membership is resolved from the detections' own story references (the reliable direction), so a story with no indexed content legitimately shows zero detections.
Data Sources
/forge/data-sources is the requirements side: each data source lists the sourcetypes that satisfy it and the library detections that depend on it — what a rule needs before it can ever fire.