Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Remote Access Software RMS Registry

Remote Access Software

Detect SharpHound Usage

Domain Account, Local Groups, Domain Trust Discovery, Local Account, Account Discovery, Domain Groups, Permission Groups Discovery

Windows Service Deletion In Registry

Service Stop

Windows Scheduled Task Service Spawned Shell

Scheduled Task, Command and Scripting Interpreter

Linux Stop Services