Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows PowerShell Disabled Kerberos Pre-Authentication Discovery Get-ADUser

Steal or Forge Kerberos Tickets, AS-REP Roasting

Eventvwr UAC Bypass

Bypass User Account Control, Abuse Elevation Control Mechanism

WSReset UAC Bypass

Bypass User Account Control, Abuse Elevation Control Mechanism

SilentCleanup UAC Bypass

Bypass User Account Control, Abuse Elevation Control Mechanism

Windows Service Created with Suspicious Service Path

System Services, Service Execution

Splunk Threat Reasearch Team (STRT)

Recent Posts

Windows PowerShell Disabled Kerberos Pre-Authentication Discovery Get-ADUser

Eventvwr UAC Bypass

WSReset UAC Bypass

SilentCleanup UAC Bypass

Windows Service Created with Suspicious Service Path