Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Identify Protocol Handlers

Command and Scripting Interpreter

Windows Ingress Tool Transfer Using Explorer

Ingress Tool Transfer

Get ADUser with PowerShell Script Block

Domain Account, Account Discovery

Windows AD Privileged Account SID History Addition

SID-History Injection, Access Token Manipulation

Log4Shell CVE-2021-44228 Exploitation

Ingress Tool Transfer, Exploit Public-Facing Application, Command and Scripting Interpreter