Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows AD add Self to Group

Account Manipulation

Detect PowerShell Applications Spawning cmd exe

Command and Scripting Interpreter

Detect Prohibited Office Applications Spawning cmd exe

Command and Scripting Interpreter

Detect Prohibited Browsers Spawning cmd exe

Command and Scripting Interpreter

Windows AD GPO Disabled

Disable or Modify Tools, Group Policy Modification

Splunk Threat Reasearch Team (STRT)

Recent Posts

Windows AD add Self to Group

Detect PowerShell Applications Spawning cmd exe

Detect Prohibited Office Applications Spawning cmd exe

Detect Prohibited Browsers Spawning cmd exe

Windows AD GPO Disabled