Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Detect Windows DNS SIGRed via Zeek

Exploitation for Client Execution

Detect Windows DNS SIGRed via Splunk Stream

Exploitation for Client Execution

aws detect sts assume role abuse

Valid Accounts

aws detect attach to role policy