Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

SilentCleanup UAC Bypass

Bypass User Account Control , Abuse Elevation Control Mechanism

Sdclt UAC Bypass

Bypass User Account Control , Abuse Elevation Control Mechanism

Registry Keys for Creating SHIM Databases

Application Shimming , Event Triggered Execution

Monitor Registry Keys for Print Monitors

Port Monitors , Boot or Logon Autostart Execution

Auto Admin Logon Registry Entry

Credentials in Registry , Unsecured Credentials