Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

AWS Credential Access RDS Password reset

Compromise Accounts, Cloud Accounts, Brute Force

Splunk Account Discovery Drilldown Dashboard Disclosure

Account Discovery

Splunk Endpoint Denial of Service DoS Zip Bomb

Endpoint Denial of Service

Linux AWK Privilege Escalation

Sudo and Sudo Caching, Abuse Elevation Control Mechanism

Linux Docker Privilege Escalation