Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Suspicious Email Attachment Extensions

Spearphishing Attachment, Phishing

Uncommon Processes On Endpoint

Malicious File

Suspicious Changes to File Associations

Change Default File Association

Remote Desktop Process Running On System

Remote Desktop Protocol, Remote Services

Sc exe Manipulating Windows Services

Windows Service, Create or Modify System Process