Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Identify Protocol Handlers

Command and Scripting Interpreter

Linux Proxy Socks Curl

Proxy, Non-Application Layer Protocol

Linux Ngrok Reverse Proxy Usage

Protocol Tunneling, Proxy, Web Service

Detect Regsvcs Spawning a Process

System Binary Proxy Execution, Regsvcs/Regasm

Windows Steal Authentication Certificates CertUtil Backup

Steal or Forge Authentication Certificates