Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Detect AWS Console Login by User from New Region

Compromise Accounts, Cloud Accounts, Unused/Unsupported Cloud Regions

Detect Excessive User Account Lockouts

Valid Accounts, Local Accounts

Detect AWS Console Login by User from New Country

Compromise Accounts, Cloud Accounts, Unused/Unsupported Cloud Regions

Azure AD Multiple Failed MFA Requests For User

Compromise Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation, Valid Accounts, Cloud Accounts

Detect AWS Console Login by User from New City

Compromise Accounts, Cloud Accounts, Unused/Unsupported Cloud Regions

Splunk Threat Reasearch Team (STRT)

Recent Posts

Detect AWS Console Login by User from New Region

Detect Excessive User Account Lockouts

Detect AWS Console Login by User from New Country

Azure AD Multiple Failed MFA Requests For User

Detect AWS Console Login by User from New City