Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Windows Scheduled Task with Highest Privileges

Scheduled Task/Job, Scheduled Task

Azure AD Successful Authentication From Different Ips

Brute Force, Password Guessing, Password Spraying

Office Document Executing Macro Code

Phishing, Spearphishing Attachment

Azure AD Concurrent Sessions From Different Ips

Browser Session Hijacking

Windows Spearphishing Attachment Onenote Spawn Mshta

Spearphishing Attachment, Phishing