Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Winword Spawning Windows Script Host

Phishing, Spearphishing Attachment

Linux Decode Base64 to Shell

Obfuscated Files or Information, Unix Shell

Suspicious Regsvr32 Register Suspicious Path

System Binary Proxy Execution, Regsvr32

Detect Rundll32 Application Control Bypass - setupapi

System Binary Proxy Execution, Rundll32

Rubeus Kerberos Ticket Exports Through Winlogon Access

Use Alternate Authentication Material, Pass the Ticket