Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Okta Risk Threshold Exceeded

Valid Accounts, Brute Force

Okta Two or More Rejected Okta Pushes

Brute Force

Okta MFA Exhaustion Hunt

Brute Force

AWS Multiple Users Failing To Authenticate From Ip

Brute Force, Password Spraying, Credential Stuffing

Powershell COM Hijacking InprocServer32 Modification

Component Object Model Hijacking, Command and Scripting Interpreter, PowerShell