Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Linux Auditd Unix Shell Configuration Modification

Unix Shell Configuration Modification, Event Triggered Execution

Linux Auditd Nopasswd Entry In Sudoers File

Sudo and Sudo Caching, Abuse Elevation Control Mechanism

Linux Auditd Doas Conf File Creation

Sudo and Sudo Caching, Abuse Elevation Control Mechanism

Linux Auditd File Permission Modification Via Chmod

Linux and Mac File and Directory Permissions Modification, File and Directory Permissions Modification

Linux Auditd System Network Configuration Discovery

System Network Configuration Discovery