Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows PowerView AD Access Control List Enumeration

Domain Accounts, Permission Groups Discovery

Active Directory Lateral Movement Identified

Exploitation of Remote Services

Windows RDP Connection Successful

RDP Hijacking

Windows DotNet Binary in Non Standard Path

Masquerading, Rename System Utilities, System Binary Proxy Execution, InstallUtil

Process Deleting Its Process File Path

Indicator Removal