Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

gcp detect oauth token abuse

Valid Accounts

Unusual LOLBAS in short period of time

Command and Scripting Interpreter, Scheduled Task/Job

System Process Running from Unexpected Location

Masquerading

Phishing Email Detection by Machine Learning Method - SSA

Phishing

Abnormally High Number Of Cloud Instances Launched

Cloud Accounts , Valid Accounts