Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows PowerSploit GPP Discovery

Unsecured Credentials, Group Policy Preferences

Windows File Share Discovery With Powerview

Unsecured Credentials, Group Policy Preferences

Windows Default Group Policy Object Modified with GPME

Domain or Tenant Policy Modification, Group Policy Modification

Windows Findstr GPP Discovery

Unsecured Credentials, Group Policy Preferences

Windows Network Share Interaction With Net

Network Share Discovery, Data from Network Shared Drive

Splunk Threat Reasearch Team (STRT)

Recent Posts

Windows PowerSploit GPP Discovery

Windows File Share Discovery With Powerview

Windows Default Group Policy Object Modified with GPME

Windows Findstr GPP Discovery

Windows Network Share Interaction With Net