Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Linux Ruby Privilege Escalation

Sudo and Sudo Caching, Abuse Elevation Control Mechanism

Detect Regasm with Network Connection

System Binary Proxy Execution, Regsvcs/Regasm

Detect Regsvr32 Application Control Bypass

System Binary Proxy Execution, Regsvr32

Windows Odbcconf Hunting

Odbcconf

Linux pkexec Privilege Escalation

Exploitation for Privilege Escalation