Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Azure AD Successful Authentication From Different Ips

Brute Force, Password Guessing, Password Spraying

Office Document Executing Macro Code

Phishing, Spearphishing Attachment

Azure AD Concurrent Sessions From Different Ips

Browser Session Hijacking

Windows Spearphishing Attachment Onenote Spawn Mshta

Spearphishing Attachment, Phishing

Azure AD High Number Of Failed Authentications From Ip