Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Malicious PowerShell Process With Obfuscation Techniques

Command and Scripting Interpreter , PowerShell

Malicious PowerShell Process - Multiple Suspicious Command-Line Arguments

PowerShell

Detect hosts connecting to dynamic domain providers

Drive-by Compromise

Suspicious mshta child process

Signed Binary Proxy Execution , Mshta

Suspicious MSBuild Spawn

Trusted Developer Utilities Proxy Execution , MSBuild