Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Suspicious writes to windows Recycle Bin

Masquerading

Suspicious writes to System Volume Information

Masquerading

Suspicious Reg exe Process

Modify Registry

Suspicious Email Attachment Extensions

Spearphishing Attachment , Phishing

Suspicious Email - UBA Anomaly

Phishing