Latest Articles

Fueling the SOC of the Future with Built-in Threat Research and Detections in Splunk Enterprise Security
Security
3 Minute Read

Fueling the SOC of the Future with Built-in Threat Research and Detections in Splunk Enterprise Security

The Splunk Threat Research Team develops security resources and content that helps enhance your ability to detect and respond to advanced threats.
Macro ATT&CK for a TTP Snack
Security
3 Minute Read

Macro ATT&CK for a TTP Snack

Splunk's Mick Baccio and Ryan Fetterman explore 2024's macro-level cyber incident trends through the lens of the MITRE ATT&CK framework.
Introducing Splunk Attack Range v3.1
Security
3 Minute Read

Introducing Splunk Attack Range v3.1

The Splunk Threat Research Team is happy to release v3.1 of Splunk Attack Range.
Vulnerability Prioritization Is a Treat for Defenders
Security
3 Minute Read

Vulnerability Prioritization Is a Treat for Defenders

There have been numerous high-profile cybersecurity incidents where vulnerability management had an impact on severe breaches – here are some notable examples.
PowerShell Web Access: Your Network's Backdoor in Plain Sight
Security
14 Minute Read

PowerShell Web Access: Your Network's Backdoor in Plain Sight

The Splunk Threat Research Teams dives deep into PowerShell Web Access (PSWA) exploring its functionality within the context of cyber threats.
Splunk is Nurturing Tomorrow’s Cybersecurity Leaders Today
Security
2 Minute Read

Splunk is Nurturing Tomorrow’s Cybersecurity Leaders Today

The Splunk Academic Alliance program combines education with practical skills development to prepare the next generation of data and cybersecurity professionals.
Macro-ATT&CK 2024: A Five-Year Perspective
Security
6 Minute Read

Macro-ATT&CK 2024: A Five-Year Perspective

Splunk’s Ryan Fetterman and Tamara Chacon dive into attacker techniques, trends, and blue team tips for analyzing and visualizing data from the past year.
Cybersecurity Awareness Is Not Just for Spooky Season
Security
3 Minute Read

Cybersecurity Awareness Is Not Just for Spooky Season

As October marks Cybersecurity Awareness Month, Splunker Mick Baccio reflects on the progress made over the past two decades.
My CUPS Runneth Over (with CVEs)
Security
11 Minute Read

My CUPS Runneth Over (with CVEs)

This blog dissects the technical intricacies of the CUPS vulnerability, explores its potential impact on affected systems, and provides detection opportunities and mitigation strategies.