Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Get ADUser with PowerShell

Domain Account, Account Discovery

Kubernetes Nginx Ingress RFI

Exploitation for Credential Access

Gsuite Email With Known Abuse Web Service Link

Spearphishing Attachment, Phishing

GetLocalUser with PowerShell

Account Discovery, Local Account

Gsuite Suspicious Shared File Name