Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Ryuk Test Files Detected

Data Encrypted for Impact

SecretDumps Offline NTDS Dumping Tool

NTDS, OS Credential Dumping

CMD Carry Out String Command Parameter

Windows Command Shell, Command and Scripting Interpreter

Windows AD Replication Request Initiated from Unsanctioned Location

DCSync, OS Credential Dumping

Windows System Shutdown CommandLine

System Shutdown/Reboot