Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Unusual NTLM Authentication Users By Destination

Brute Force, Password Spraying

Multiple Okta Users With Invalid Credentials From The Same IP

Password Spraying, Valid Accounts, Default Accounts

ASL AWS IAM Failure Group Deletion

Account Manipulation

ASL AWS ECR Container Upload Unknown User

Malicious Image, User Execution

ASL AWS ECR Container Upload Outside Business Hours