Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Rundll32 Process Creating Exe Dll Files

System Binary Proxy Execution, Rundll32

Detect Copy of ShadowCopy with Script Block Logging

Security Account Manager, OS Credential Dumping

Mshta spawning Rundll32 OR Regsvr32 Process

System Binary Proxy Execution, Mshta

Detect New Open S3 Buckets over AWS CLI

Data from Cloud Storage

Detect New Open S3 buckets