Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Exploit Public Facing Application via Apache Commons Text

Web Shell, Server Software Component, Exploit Public-Facing Application, External Remote Services

AWS Successful Console Authentication From Multiple IPs

Compromise Accounts, Unused/Unsupported Cloud Regions

Detect DGA domains using pretrained model in DSDL

Domain Generation Algorithms

Windows PowerShell Add Module to Global Assembly Cache

Server Software Component, IIS Components

Windows Phishing PDF File Executes URL Link

Spearphishing Attachment, Phishing