Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Detect Excessive Account Lockouts From Endpoint

Valid Accounts, Domain Accounts

Detect AWS Console Login by User from New Region

Compromise Accounts, Cloud Accounts, Unused/Unsupported Cloud Regions

Detect Excessive User Account Lockouts

Valid Accounts, Local Accounts

Detect AWS Console Login by User from New Country