Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

AWS ECR Container Scanning Findings High

Malicious Image, User Execution

AWS ECR Container Scanning Findings Medium

Malicious Image, User Execution

Windows CAB File on Disk

Spearphishing Attachment

Azure AD Multi-Source Failed Authentications Spike

Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying, Credential Stuffing

Windows ConHost with Headless Argument

Hidden Window, Run Virtual Instance