Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Registry Certificate Added

Install Root Certificate, Subvert Trust Controls

Time Provider Persistence Registry

Time Providers, Boot or Logon Autostart Execution

Windows Disable Memory Crash Dump

Data Destruction

Windows Disable Shutdown Button Through Registry

Modify Registry

Linux Deletion Of Cron Jobs

Data Destruction, File Deletion, Indicator Removal