Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Administrative Shares Accessed On Multiple Hosts

Network Share Discovery

VMWare Aria Operations Exploit Attempt

External Remote Services, Exploit Public-Facing Application, Exploitation of Remote Services, Exploitation for Privilege Escalation

Powershell Load Module in Meterpreter

Command and Scripting Interpreter, PowerShell

Kubernetes Pod With Host Network Attachment

User Execution

Excessive Usage Of SC Service Utility

System Services, Service Execution