Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Detect AzureHound Command-Line Arguments

Domain Account, Local Groups, Domain Trust Discovery, Local Account, Account Discovery, Domain Groups, Permission Groups Discovery

Detect AzureHound File Modifications

Domain Account, Local Groups, Domain Trust Discovery, Local Account, Account Discovery, Domain Groups, Permission Groups Discovery

Detect SharpHound Usage

Domain Account, Local Groups, Domain Trust Discovery, Local Account, Account Discovery, Domain Groups, Permission Groups Discovery

WinRM Spawning a Process

Exploit Public-Facing Application

Allow Inbound Traffic In Firewall Rule

Remote Desktop Protocol, Remote Services

Splunk Threat Reasearch Team (STRT)

Recent Posts

Detect AzureHound Command-Line Arguments

Detect AzureHound File Modifications

Detect SharpHound Usage

WinRM Spawning a Process

Allow Inbound Traffic In Firewall Rule