Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Winword Spawning PowerShell

Phishing , Spearphishing Attachment

WinEvent Scheduled Task Created to Spawn Shell

Scheduled Task , Scheduled Task/Job

Excel Spawning Windows Script Host

Security Account Manager , OS Credential Dumping

Excel Spawning PowerShell