Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Snake Malware Registry Modification wav OpenWithProgIds

Modify Registry

Splunk Low Privilege User Can View Hashed Splunk Password

Exploitation for Credential Access

Splunk Persistent XSS Via URL Validation Bypass W Dashboard

Drive-by Compromise

AWS S3 Exfiltration Behavior Identified

Transfer Data to Cloud Account

Windows Registry BootExecute Modification

Pre-OS Boot, Registry Run Keys / Startup Folder