Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

DNS Exfiltration Using Nslookup App

Exfiltration Over Alternative Protocol

Windows Invalid Users Failed Authentication via Kerberos

Password Spraying , Brute Force

Windows Disabled Users Failing To Authenticate Kerberos

Password Spraying , Brute Force

Office Document Executing Macro Code

Phishing , Spearphishing Attachment

Office Document Creating Schedule Task