Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows AD DCShadow Privileges ACL Addition

Domain or Tenant Policy Modification, Rogue Domain Controller, Windows File and Directory Permissions Modification

Windows DLL Search Order Hijacking Hunt

DLL Search Order Hijacking, Hijack Execution Flow

Detect Distributed Password Spray Attempts

Password Spraying, Brute Force

Detect Password Spray Attempts

Password Spraying, Brute Force

Detect Password Spray Attack Behavior From Source

Password Spraying, Brute Force

Splunk Threat Reasearch Team (STRT)

Recent Posts

Windows AD DCShadow Privileges ACL Addition

Windows DLL Search Order Hijacking Hunt

Detect Distributed Password Spray Attempts

Detect Password Spray Attempts

Detect Password Spray Attack Behavior From Source