Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

AWS High Number Of Failed Authentications For User

Password Policy Discovery

Windows AD Domain Controller Audit Policy Disabled

Disable or Modify Tools

Windows Powershell Cryptography Namespace

PowerShell, Command and Scripting Interpreter

Windows AD Domain Controller Promotion

Rogue Domain Controller

AWS Password Policy Changes