Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Steal Authentication Certificates Export PfxCertificate

Steal or Forge Authentication Certificates

Windows IIS Components Add New Module

Server Software Component, IIS Components

Linux Busybox Privilege Escalation

Sudo and Sudo Caching, Abuse Elevation Control Mechanism

Domain Account Discovery with Wmic

Domain Account, Account Discovery

Dump LSASS via procdump

LSASS Memory, OS Credential Dumping