Splunk Security Content

Splunk Threat Reasearch Team (STRT)

We help security teams around the globe strengthen operations by providing tactical guidance and insights to detect, investigate and respond against the latest threats.

Disable Show Hidden Files

Hidden Files and Directories, Disable or Modify Tools, Hide Artifacts, Impair Defenses, Modify Registry

Disabling ControlPanel

Disable or Modify Tools, Impair Defenses, Modify Registry

Disable Windows SmartScreen Protection

Disable or Modify Tools, Impair Defenses

Windows Unsecured Outlook Credentials Access In Registry

Unsecured Credentials

DNS Query Length With High Standard Deviation

Exfiltration Over Unencrypted Non-C2 Protocol, Exfiltration Over Alternative Protocol