Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Defender Tools in Non Standard Path

Masquerading, Rename System Utilities

AWS Defense Evasion Delete CloudWatch Log Group

Impair Defenses, Disable Cloud Logs

AWS Defense Evasion Update Cloudtrail

Impair Defenses, Disable Cloud Logs

Windows MOF Event Triggered Execution via WMI

Windows Management Instrumentation Event Subscription

Powershell Disable Security Monitoring

Disable or Modify Tools, Impair Defenses