Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows WinLogon with Public Network Connection

Bootkit

Windows PowerSploit GPP Discovery

Unsecured Credentials, Group Policy Preferences

Windows File Share Discovery With Powerview

Unsecured Credentials, Group Policy Preferences

Windows Default Group Policy Object Modified with GPME

Domain Policy Modification, Group Policy Modification

Windows Findstr GPP Discovery

Unsecured Credentials, Group Policy Preferences

Splunk Threat Reasearch Team (STRT)

Recent Posts

Windows WinLogon with Public Network Connection

Windows PowerSploit GPP Discovery

Windows File Share Discovery With Powerview

Windows Default Group Policy Object Modified with GPME

Windows Findstr GPP Discovery