Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Okta Suspicious Use of a Session Cookie

Steal Web Session Cookie

Clop Common Exec Parameter

User Execution

Okta Multiple Failed Requests to Access Applications

Web Session Cookie, Cloud Service Dashboard

Windows Rundll32 WebDav With Network Connection

Exfiltration Over Unencrypted Non-C2 Protocol

Windows Findstr GPP Discovery

Unsecured Credentials, Group Policy Preferences