Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Detect SharpHound Usage

Domain Account, Local Groups, Domain Trust Discovery, Local Account, Account Discovery, Domain Groups, Permission Groups Discovery

Detect SharpHound Command-Line Arguments

Domain Account, Local Groups, Domain Trust Discovery, Local Account, Account Discovery, Domain Groups, Permission Groups Discovery

System Information Discovery Detection

System Information Discovery

Windows SOAPHound Binary Execution

Domain Account, Local Groups, Domain Trust Discovery, Local Account, Account Discovery, Domain Groups, Permission Groups Discovery

Network Traffic to Active Directory Web Services Protocol

Domain Account, Local Groups, Domain Trust Discovery, Local Account, Account Discovery, Domain Groups, Permission Groups Discovery

Splunk Threat Reasearch Team (STRT)

Recent Posts

Detect SharpHound Usage

Detect SharpHound Command-Line Arguments

System Information Discovery Detection

Windows SOAPHound Binary Execution

Network Traffic to Active Directory Web Services Protocol