Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Execution of File with Multiple Extensions

Masquerading , Rename System Utilities

Disabling Remote User Account Control

Bypass User Account Control , Abuse Elevation Control Mechanism

Detect Prohibited Applications Spawning cmd exe

Command and Scripting Interpreter , Windows Command Shell

Detect processes used for System Network Configuration Discovery

System Network Configuration Discovery

Detect Excessive Account Lockouts From Endpoint

Valid Accounts , Domain Accounts