Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Multiple Users Failing To Authenticate From Host Using NTLM

Password Spraying , Brute Force

Multiple Users Attempting To Authenticate Using Explicit Credentials

Password Spraying , Brute Force

AWS Excessive Security Scanning

Cloud Service Discovery

Winword Spawning Windows Script Host

Phishing , Spearphishing Attachment

Winword Spawning PowerShell