Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Suspicious writes to windows Recycle Bin

Masquerading

Suspicious Reg exe Process

Modify Registry

SMB Traffic Spike

SMB/Windows Admin Shares, Remote Services

Suspicious Email - UBA Anomaly

Phishing

Uncommon Processes On Endpoint

Malicious File