Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Malicious Powershell Executed As A Service

System Services, Service Execution

AWS IAM Assume Role Policy Brute Force

Cloud Infrastructure Discovery, Brute Force

AWS IAM Delete Policy

Account Manipulation

AWS IAM Successful Group Deletion

Cloud Groups, Account Manipulation, Permission Groups Discovery

DSQuery Domain Discovery

Domain Trust Discovery