Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Detect Baron Samedit CVE-2021-3156

Exploitation for Privilege Escalation

Revil Registry Entry

Modify Registry

O365 New Federated Domain Added

Cloud Account , Create Account

O365 Excessive SSO logon errors

Modify Authentication Process

O365 Add App Role Assignment Grant User