Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Privilege Escalation System Process Without System Parent

Exploitation for Privilege Escalation, Abuse Elevation Control Mechanism, Access Token Manipulation

Kubernetes Cron Job Creation

Container Orchestration Job

Windows Query Registry Browser List Application

Query Registry

Kubernetes Create or Update Privileged Pod

User Execution

Windows Registry SIP Provider Modification

SIP and Trust Provider Hijacking