Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

WinEvent Scheduled Task Created to Spawn Shell

Scheduled Task, Scheduled Task/Job

WinEvent Scheduled Task Created Within Public Path

Scheduled Task, Scheduled Task/Job

Multiple Users Failing To Authenticate From Host Using Kerberos

Password Spraying, Brute Force

Malicious Powershell Executed As A Service

System Services, Service Execution

AWS IAM Assume Role Policy Brute Force

Cloud Infrastructure Discovery, Brute Force