Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Powershell DownloadString

Command and Scripting Interpreter, PowerShell, Ingress Tool Transfer

Windows Multiple NTLM Null Domain Authentications

Brute Force, Password Spraying

Windows Unusual NTLM Authentication Destinations By Source

Brute Force, Password Spraying

Windows Unusual NTLM Authentication Destinations By User

Brute Force, Password Spraying

Windows Unusual NTLM Authentication Users By Source

Brute Force, Password Spraying

Splunk Threat Reasearch Team (STRT)

Recent Posts

Windows Powershell DownloadString

Windows Multiple NTLM Null Domain Authentications

Windows Unusual NTLM Authentication Destinations By Source

Windows Unusual NTLM Authentication Destinations By User

Windows Unusual NTLM Authentication Users By Source