Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows File Share Discovery With Powerview

Network Share Discovery

Windows Large Number of Computer Service Tickets Requested

Network Share Discovery, Valid Accounts

AWS EC2 Snapshot Shared Externally

Transfer Data to Cloud Account

Windows Remote Create Service

Create or Modify System Process, Windows Service

Windows Service Create RemComSvc

Windows Service, Create or Modify System Process