Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Suspicious writes to windows Recycle Bin

Masquerading

Powershell Remove Windows Defender Directory

Disable or Modify Tools, Impair Defenses

Windows File Share Discovery With Powerview

Network Share Discovery

Windows Vulnerable Driver Loaded

Windows Service

Powershell Fileless Process Injection via GetProcAddress

Command and Scripting Interpreter, Process Injection, PowerShell