Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Enable Win32 ScheduledJob via Registry

Scheduled Task

PowerShell Start or Stop Service

PowerShell

Windows Administrative Shares Accessed On Multiple Hosts

Network Share Discovery

Windows Rapid Authentication On Multiple Hosts

Security Account Manager

AWS Exfiltration via EC2 Snapshot

Transfer Data to Cloud Account