Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Detect IPv6 Network Infrastructure Threats

Hardware Additions, Network Denial of Service, Adversary-in-the-Middle, ARP Cache Poisoning

Detect Traffic Mirroring

Hardware Additions, Automated Exfiltration, Network Denial of Service, Traffic Duplication

Detect Port Security Violation

Hardware Additions, Network Denial of Service, Adversary-in-the-Middle, ARP Cache Poisoning

Detect SNICat SNI Exfiltration

Exfiltration Over C2 Channel

Detect Activity Related to Pass the Hash Attacks

Use Alternate Authentication Material, Pass the Hash