Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Unusual Count Of Users Failed To Auth Using Kerberos

Password Spraying, Brute Force

Detect AWS Console Login by New User

Compromise Accounts, Cloud Accounts, Unsecured Credentials

Schtasks Run Task On Demand

Scheduled Task/Job

F5 BIG-IP iControl REST Vulnerability CVE-2022-1388

Exploit Public-Facing Application, External Remote Services

Splunk unnecessary file extensions allowed by lookup table uploads

Drive-by Compromise