Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Multiple Users Remotely Failed To Authenticate From Host

Password Spraying, Brute Force

Windows Multiple Users Failed To Authenticate From Host Using NTLM

Password Spraying, Brute Force

AWS Excessive Security Scanning

Cloud Service Discovery

Winword Spawning PowerShell

Phishing, Spearphishing Attachment

Winword Spawning Windows Script Host