Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Randomly Generated Scheduled Task Name

Scheduled Task/Job, Scheduled Task

Credential ExtractionFGDump and CacheDump

OS Credential Dumping, Security Account Manager

Detect RClone Command-Line Usage

Automated Exfiltration

Randomly Generated Windows Service Name

Create or Modify System Process, Windows Service

Attempted Credential Dump From Registry via Reg exe