Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Detect GCP Storage access from a new IP

Data from Cloud Storage Object

Detect New Open GCP Storage Buckets

Data from Cloud Storage Object

Detect F5 TMUI RCE CVE-2020-5902

Exploit Public-Facing Application

Cloud Instance Modified By Previously Unseen User

Cloud Accounts , Valid Accounts

Detect Windows DNS SIGRed via Zeek

Exploitation for Client Execution