Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Suspicious Driver Loaded Path

Windows Service, Create or Modify System Process

XMRIG Driver Loaded

Windows Service, Create or Modify System Process

Trickbot Named Pipe

Process Injection

Plain HTTP POST Exfiltrated Data

Exfiltration Over Unencrypted Non-C2 Protocol, Exfiltration Over Alternative Protocol

Winword Spawning Cmd

Phishing, Spearphishing Attachment