| Date | Title | Description |
| Sign up to see | Sign up to see | Sign up to see |
| Oct 5, 2021 | Active Directory Discovery Detection: Threat Research Release, September 2021 | Share:
By Splunk Threat Research Team October 04, 2021
The Splunk threat research team recently developed a new analytic story to help security operations center (SOC) analysts detect adversaries executing discovery and reconnaissance tasks... |
| Sep 8, 2021 | Splunk : PowerShell Detections — Threat Research Release, August 2021 | Share:
By Splunk Threat Research Team September 07, 2021
The Splunk Threat Research Team (STRT) most recently began evaluating more ways to generate security content using native Windows event logging regarding PowerShell Script Block Loggi... |
| Jul 12, 2021 | Data Exfiltration Detections: Threat Research Release, June 2021 | Share:
By Splunk Threat Research Team July 12, 2021
Data exfiltration is often the last step in a cyberattack and thus the last chance to detect the cyberattack. Therefore, the Splunk Threat Research team focused on developing detections to... |
| May 3, 2021 | SPLUNK INC.
Clop Ransomware Detection: Threat Research Release, April 2021 | Share:
By Splunk Threat Research Team May 03, 2021
Clop Ransomware has been active since 2019 and has been mostly associated with financially-driven criminal groups. However, lately this ransomware payload has been observed in campaigns aga... |
| Mar 12, 2021 | Splunking AWS ECS And Fargate Part 3: Sending Fargate Logs To Splunk | Share:
By Andrij Demianczuk March 12, 2021
Welcome to part 3 of the blog series where we go through how to forward container logs from Amazon ECS and Fargate to Splunk.
In part 1, Splunking AWS ECS Part 1: Setting Up AWS And Splunk, we focu... |