Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

WBAdmin Delete System Backups

Inhibit System Recovery

Suspicious mshta spawn

Signed Binary Proxy Execution, Mshta

Detect Rundll32 Inline HTA Execution

Signed Binary Proxy Execution, Mshta

Malicious PowerShell Process With Obfuscation Techniques

Command and Scripting Interpreter, PowerShell

Detect hosts connecting to dynamic domain providers

Drive-by Compromise