Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows AD Dangerous Group ACL Modification

Domain or Tenant Policy Modification, File and Directory Permissions Modification, Windows File and Directory Permissions Modification

Windows AD Suspicious Attribute Modification

Use Alternate Authentication Material, File and Directory Permissions Modification, Windows File and Directory Permissions Modification

Windows AD Object Owner Updated

Domain or Tenant Policy Modification, File and Directory Permissions Modification, Windows File and Directory Permissions Modification

Windows AD Domain Root ACL Deletion

Domain or Tenant Policy Modification, File and Directory Permissions Modification, Windows File and Directory Permissions Modification

Windows AD Domain Root ACL Modification

Domain or Tenant Policy Modification, File and Directory Permissions Modification, Windows File and Directory Permissions Modification

Splunk Threat Reasearch Team (STRT)

Recent Posts

Windows AD Dangerous Group ACL Modification

Windows AD Suspicious Attribute Modification

Windows AD Object Owner Updated

Windows AD Domain Root ACL Deletion

Windows AD Domain Root ACL Modification