Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Splunk Enterprise Windows Deserialization File Partition

Exploit Public-Facing Application

Splunk RCE via External Lookup Copybuckets

Exploitation of Remote Services

Splunk Unauthorized Experimental Items Creation

Drive-by Compromise

Splunk Unauthorized Notification Input by User

Abuse Elevation Control Mechanism

Splunk CSRF in the SSG kvstore Client Endpoint