Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Impacket Lateral Movement Commandline Parameters

Remote Services, SMB/Windows Admin Shares, Distributed Component Object Model, Windows Management Instrumentation, Windows Service

Dump LSASS via comsvcs DLL

LSASS Memory, OS Credential Dumping

Windows Root Domain linked policies Discovery

Domain Account, Account Discovery

Windows Raw Access To Master Boot Record Drive

Disk Structure Wipe, Disk Wipe

Linux Java Spawning Shell

Exploit Public-Facing Application