Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

WevtUtil Usage To Clear Logs

Indicator Removal on Host, Clear Windows Event Logs

WMI Recon Running Process Or Services

Gather Victim Host Information

Start Up During Safe Mode Boot

Registry Run Keys / Startup Folder, Boot or Logon Autostart Execution

Recon Using WMI Class

Gather Victim Host Information

Recon AVProduct Through Pwh or WMI

Gather Victim Host Information

Splunk Threat Reasearch Team (STRT)

Recent Posts

WevtUtil Usage To Clear Logs

WMI Recon Running Process Or Services

Start Up During Safe Mode Boot

Recon Using WMI Class

Recon AVProduct Through Pwh or WMI