Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Scheduled Task Created Via XML

Scheduled Task, Scheduled Task/Job

GetWmiObject User Account with PowerShell Script Block

Account Discovery, Local Account, PowerShell

Windows Screen Capture Via Powershell

Screen Capture

WinEvent Scheduled Task Created Within Public Path