Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Suspicious mshta spawn

Signed Binary Proxy Execution, Mshta

Detect Rundll32 Inline HTA Execution

Signed Binary Proxy Execution, Mshta

Malicious PowerShell Process With Obfuscation Techniques

Command and Scripting Interpreter, PowerShell

Detect hosts connecting to dynamic domain providers

Drive-by Compromise

Suspicious mshta child process

Signed Binary Proxy Execution, Mshta

Splunk Threat Reasearch Team (STRT)

Recent Posts

Suspicious mshta spawn

Detect Rundll32 Inline HTA Execution

Malicious PowerShell Process With Obfuscation Techniques

Detect hosts connecting to dynamic domain providers

Suspicious mshta child process