Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Registry Keys for Creating SHIM Databases

Application Shimming, Event Triggered Execution

Windows Known Abused DLL Created

DLL Search Order Hijacking, DLL Side-Loading, Hijack Execution Flow

Windows Multiple Users Fail To Authenticate Wth ExplicitCredentials

Password Spraying, Brute Force

Windows Modify Registry Suppress Win Defender Notif

Modify Registry

Windows System Network Config Discovery Display DNS

System Network Configuration Discovery