Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Impair Defense Disable Controlled Folder Access

Disable or Modify Tools, Impair Defenses

Rundll32 Create Remote Thread To A Process

Process Injection

GetWmiObject Ds Computer with PowerShell Script Block

Remote System Discovery

O365 New Forwarding Mailflow Rule Created

Email Collection

Windows DnsAdmins New Member Added

Account Manipulation