Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

ASL AWS IAM Successful Group Deletion

Cloud Groups, Account Manipulation, Permission Groups Discovery

ASL AWS Defense Evasion Update Cloudtrail

Impair Defenses, Disable or Modify Cloud Logs

ASL AWS Defense Evasion Stop Logging Cloudtrail

Disable or Modify Cloud Logs, Impair Defenses

Impacket Lateral Movement WMIExec Commandline Parameters

Remote Services, SMB/Windows Admin Shares, Distributed Component Object Model, Windows Management Instrumentation, Windows Service

Windows Screen Capture Via Powershell

Screen Capture