Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Domain Group Discovery With Dsquery

Permission Groups Discovery, Domain Groups

Remote System Discovery with Wmic

Remote System Discovery

GitHub Pull Request from Unknown User

Compromise Software Dependencies and Development Tools, Supply Chain Compromise

Circle CI Disable Security Step

Compromise Client Software Binary

Domain Controller Discovery with Wmic