Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Linux Auditd Doas Tool Execution

Sudo and Sudo Caching, Abuse Elevation Control Mechanism

Linux Auditd Unload Module Via Modprobe

Kernel Modules and Extensions, Boot or Logon Autostart Execution

Linux Auditd Service Restarted

Systemd Timers, Scheduled Task/Job

Linux Auditd Possible Access To Sudoers File