Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Indirect Command Execution Via forfiles

Indirect Command Execution

GitHub Actions Disable Security Workflow

Compromise Software Supply Chain, Supply Chain Compromise

GetNetTcpconnection with PowerShell Script Block

System Network Connections Discovery

Windows PowerView Constrained Delegation Discovery

Remote System Discovery

Windows Drivers Loaded by Signature

Rootkit, Exploitation for Privilege Escalation