Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

AWS High Number Of Failed Authentications For User

Password Policy Discovery

Kubernetes Anomalous Outbound Network Activity from Process

User Execution

Kerberos User Enumeration

Gather Victim Identity Information, Email Addresses

Suspicious Ticket Granting Ticket Request

Valid Accounts, Domain Accounts

Windows AppLocker Execution from Uncommon Locations

System Binary Proxy Execution