Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Linux Csvtool Privilege Escalation

Sudo and Sudo Caching, Abuse Elevation Control Mechanism

Office Product Writing cab or inf

Phishing, Spearphishing Attachment

DLLHost with no Command Line Arguments with Network

Process Injection

Java Writing JSP File

Exploit Public-Facing Application, External Remote Services

Attempted Credential Dump From Registry via Reg exe

Security Account Manager, OS Credential Dumping