Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Detect SNICat SNI Exfiltration

Exfiltration Over C2 Channel

Detect Kerberoasting

Kerberoasting, Steal or Forge Kerberos Tickets

Detect Activity Related to Pass the Hash Attacks

Use Alternate Authentication Material , Pass the Hash

GCP Detect high risk permissions by resource and account

Valid Accounts

GCP Detect accounts with high risk roles by project