Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

PowerShell 4104 Hunting

Command and Scripting Interpreter, PowerShell

Executable File Written in Administrative SMB Share

Remote Services, SMB/Windows Admin Shares

Domain Group Discovery With Net

Permission Groups Discovery, Domain Groups

Windows Scheduled Task Service Spawned Shell

Scheduled Task, Command and Scripting Interpreter

Suspicious Process Executed From Container File

Malicious File, Masquerade File Type