Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Notepad with no Command Line Arguments

Process Injection

Clop Common Exec Parameter

User Execution

Excel Spawning Windows Script Host

Security Account Manager, OS Credential Dumping

Linux c89 Privilege Escalation

Sudo and Sudo Caching, Abuse Elevation Control Mechanism

Linux Ingress Tool Transfer Hunting

Ingress Tool Transfer