Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Suspicious Rundll32 StartW

System Binary Proxy Execution, Rundll32

Windows Modify Registry EnableLinkedConnections

Modify Registry

Detect Exchange Web Shell

Server Software Component, Web Shell, Exploit Public-Facing Application, External Remote Services

Cobalt Strike Named Pipes

Process Injection

Suspicious MSBuild Rename

Masquerading, Trusted Developer Utilities Proxy Execution, Rename System Utilities, MSBuild