This blog post covers security content developed May 2026 – July 2026

The Splunk Threat Research Team had two releases of new security content via the ESCU app.

See how Exposure Analytics adds context to investigations.

At Black Hat 2026, Cisco, Splunk, and Cisco Talos are joining forces to flip the script on attackers.

Security teams can move beyond alert counts and MITRE coverage to measure real ROI from Splunk Enterprise Security.

Unmask Phantom Stealer, a .NET credential-stealing threat, and explore its steganography, shellcode injection, and evasion tactics with 32 actionable Splunk detections.

Splunk has introduced Automated Threat Analysis in Splunk Enterprise Security, incorporating many core capabilities that originated in Splunk Attack Analyzer directly into ES.

Learn how the Salat Stealer campaign uses Go-based surveillance and data exfiltration, and explore its infection chain and how to hunt for this threat using Splunk.

In June, the Splunk Threat Research Team (STRT) had 1 release of new security content via the Enterprise Security Content Update (ESCU) app (v6.1.0).