Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Excessive Usage Of Net App

Account Access Removal

Sdelete Application Execution

Data Destruction, File Deletion, Indicator Removal

Windows Phishing PDF File Executes URL Link

Spearphishing Attachment, Phishing

Network Connection Discovery With Netstat

System Network Connections Discovery

Windows Impair Defense Disable Win Defender Report Infection

Disable or Modify Tools, Impair Defenses