Click here to download all references as Bib-File.
| 2021-07-21 ⋅ splunk ⋅ Detecting Trickbot with Splunk TrickBot |
| 2021-07-06 ⋅ splunk ⋅ REvil Ransomware Threat Research Update and Detections REvil |
| 2021-07-05 ⋅ splunk ⋅ Kaseya, Sera. What REvil Shall Encrypt, Shall Encrypt REvil |
| 2021-06-10 ⋅ splunk ⋅ Detecting Password Spraying Attacks: Threat Research Release May 2021 |
| 2021-05-17 ⋅ splunk ⋅ DarkSide Ransomware: Splunk Threat Update and Detections DarkSide |
| 2021-05-11 ⋅ splunk ⋅ The DarkSide of the Ransomware Pipeline DarkSide |
| 2021-05-03 ⋅ splunk ⋅ Clop Ransomware Detection: Threat Research Release, April 2021 Clop |
| 2021-04-22 ⋅ splunk ⋅ SUPERNOVA Redux, with a Generous Portion of Masquerading SUPERNOVA |
| 2021-04-21 ⋅ splunk ⋅ Monitoring Pulse Connect Secure With Splunk (CISA Emergency Directive 21-03) |
| 2021-04-13 ⋅ splunk ⋅ Detecting Clop Ransomware Clop |
| 2021-03-12 ⋅ splunk ⋅ Detecting Microsoft Exchange Vulnerabilities - 0 + 8 Days Later… |
| 2021-03-09 ⋅ splunk ⋅ Cloud Federated Credential Abuse & Cobalt Strike: Threat Research February 2021 Cobalt Strike |
| 2021-03-03 ⋅ splunk ⋅ Detecting HAFNIUM Exchange Server Zero-Day Activity in Splunk HAFNIUM |
| 2021-01-08 ⋅ splunk ⋅ A Golden SAML Journey: SolarWinds Continued SUNBURST |
| 2021-01-04 ⋅ splunk ⋅ Detecting Supernova Malware: SolarWinds Continued SUPERNOVA |
| 2020-12-17 ⋅ splunk ⋅ Onboarding Threat Indicators into Splunk Enterprise Security: SolarWinds Continued SUNBURST |
| 2020-12-14 ⋅ splunk ⋅ Using Splunk to Detect Sunburst Backdoor SUNBURST |
| 2020-11-12 ⋅ Hurricane Labs ⋅ Splunking with Sysmon Part 4: Detecting Trickbot TrickBot |
| 2020-10-31 ⋅ splunk ⋅ Ryuk and Splunk Detections Ryuk |
| 2019-05-23 ⋅ Vulnerability.ch Blog ⋅ Analysing "Retefe" with Sysmon and Splunk Retefe |