Latest Articles

Breaking Trust in MMC: XMLDriven Malicious Loader via .MSC Files
Security
5 Minute Read

Breaking Trust in MMC: XMLDriven Malicious Loader via .MSC Files

Learn how attackers abuse Microsoft Management Console (.msc) files and XML loaders to execute malware. Discover detection strategies using Splunk and MITRE ATT&CK.
Why Your Network is Your Best Defense: A Complete Guide to Threat Detection, Investigation, and Response
Security
3 Minute Read

Why Your Network is Your Best Defense: A Complete Guide to Threat Detection, Investigation, and Response

Discover how to leverage your network for threat detection and response. Learn how Splunk and Cisco integrations reduce MTTD, MTTR, and MTTC in modern SOCs.
From Expert Systems to Agentic AI: The Evolution of AI in Cybersecurity
Security
5 Minute Read

From Expert Systems to Agentic AI: The Evolution of AI in Cybersecurity

We explore AI’s journey through decades of innovation to see how it has reshaped the cybersecurity landscape — and what it takes to stay a step ahead.
Reinventing the Incident Responder's Day: Empowering Tier 2 SOC Analysts with Splunk's Agentic SOC Platform
Security
5 Minute Read

Reinventing the Incident Responder's Day: Empowering Tier 2 SOC Analysts with Splunk's Agentic SOC Platform

Splunk Agentic SOC platform is purpose-built to transform the demanding world of the SOC team, making day-to-day tasks significantly easier and more effective.
Splunk Security Content for Threat Detection & Response: February 2026 Update
Security
5 Minute Read

Splunk Security Content for Threat Detection & Response: February 2026 Update

Stay ahead of cyber threats with the latest Splunk security content. Explore new analytic stories for Shadow AI, Kerberos coercion, and npm supply chain attacks.
Trust at Inference Time: Investigating GGUF Model Templates at Scale
Security
5 Minute Read

Trust at Inference Time: Investigating GGUF Model Templates at Scale

Discover the risks of inference-time poisoning in GGUF models. Learn how to detect malicious chat templates and monitor LLM metadata at scale for better security.
Splunk Attack Range v5
Security
5 Minute Read

Splunk Attack Range v5

Build instrumented cloud labs with Splunk Attack Range v5. Simulate attacks, generate telemetry, and test detections on AWS, Azure, and GCP using Docker and APIs.
Splunk Enterprise Security Premier is Now Generally Available: Delivering the Industry’s Best Analyst Experience
Security
5 Minute Read

Splunk Enterprise Security Premier is Now Generally Available: Delivering the Industry’s Best Analyst Experience

Splunk is proud to announce the general availability of Splunk Enterprise Security (ES) Premier for cloud customers.
When AI Tools Turn Against You: Operationalizing MCP Server Security with the Splunk MCP TA
Security
4 Minute Read

When AI Tools Turn Against You: Operationalizing MCP Server Security with the Splunk MCP TA

Learn how to secure Model Context Protocol (MCP) servers using the Splunk MCP TA.