Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows BootLoader Inventory

System Firmware, Pre-OS Boot

Suspicious Process With Discord DNS Query

Visual Basic, Command and Scripting Interpreter

Logon Script Event Trigger Execution

Boot or Logon Initialization Scripts, Logon Script (Windows)

Runas Execution in CommandLine

Access Token Manipulation, Token Impersonation/Theft

Suspicious Email Attachment Extensions

Spearphishing Attachment, Phishing