Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Rename System Utilities Advpack dll LOLBAS in Non Standard Path

Masquerading, Rename System Utilities

Windows Rename System Utilities Appinstaller exe LOLBAS in Non Standard Path

Masquerading, Rename System Utilities

O365 Email Access By Security Administrator

Exfiltration Over Web Service, Email Collection, Remote Email Collection

O365 SharePoint Allowed Domains Policy Changed

Cloud Account

O365 Email Reported By Admin Found Malicious

Phishing, Spearphishing Attachment, Spearphishing Link