Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Splunk RBAC Bypass On Indexing Preview REST Endpoint

Access Token Manipulation

Windows Snake Malware File Modification Crmlog

Obfuscated Files or Information

Windows Snake Malware Registry Modification wav OpenWithProgIds

Modify Registry

Splunk Low Privilege User Can View Hashed Splunk Password

Exploitation for Credential Access

Splunk Persistent XSS Via URL Validation Bypass W Dashboard

Drive-by Compromise