Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Excessive number of taskhost processes

System Owner/User Discovery

Known Services Killed by Ransomware

Inhibit System Recovery

Excessive number of distinct processes created in Windows Temp folder

Command and Scripting Interpreter

Wbemprox COM Object Execution

Signed Binary Proxy Execution, CMSTP

Revil Registry Entry

Modify Registry