Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Steal Authentication Certificates - ESC1 Authentication

Steal or Forge Authentication Certificates, Use Alternate Authentication Material

Windows Steal Authentication Certificates - ESC1 Abuse

Steal or Forge Authentication Certificates

Windows Proxy Via Netsh

Internal Proxy, Proxy

Windows Ldifde Directory Object Behavior

Ingress Tool Transfer, Domain Groups

Windows Proxy Via Registry