Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Modify System Firewall with Notable Process Path

Disable or Modify System Firewall, Impair Defenses

Windows Registry Payload Injection

Obfuscated Files or Information, Fileless Storage

GetAdComputer with PowerShell

Remote System Discovery

Recursive Delete of Directory In Batch CMD

File Deletion, Indicator Removal

Windows DLL Side-Loading In Calc

DLL Side-Loading, Hijack Execution Flow