Latest Articles

Behind the Code: The Layered Defense-Evasion of VIP Keylogger
Security
15 Minute Read

Behind the Code: The Layered Defense-Evasion of VIP Keylogger

The Splunk Threat Research Team analyzes the VIP Keylogger malware. Learn about its evasion tactics, including obfuscation and steganography, to improve your detection and threat-hunting strategies.
Splunk Security Content for Threat Detection & Response: May 2026 Update
Security
5 Minute Read

Splunk Security Content for Threat Detection & Response: May 2026 Update

Looking for the latest Splunk security content? This page is updated quarterly with all the latest security content details.
Splunk Security Content for Threat Detection & Response: April Recap
Security
5 Minute Read

Splunk Security Content for Threat Detection & Response: April Recap

In April, the Splunk Threat Research Team had 2 releases of new security content via the Enterprise Security Content Update app.
Building the Foundation for Agentic-AI: Introducing Exposure Analytics in Splunk Enterprise Security
Security
4 Minute Read

Building the Foundation for Agentic-AI: Introducing Exposure Analytics in Splunk Enterprise Security

Exposure analytics enables Security Engineers and SOC analysts to continuously discover, enrich, and analyze entities, including assets and users, that comprise the attack surface.
From Data to Defense: Mastering the Detection Lifecycle with Detection Studio
Security
3 Minute Read

From Data to Defense: Mastering the Detection Lifecycle with Detection Studio

We are excited to announce Detection Studio is now generally available (GA) for both ES Essentials and ES Premier customers.
Not Just Annoying Ads: Adware Bundles Delivering Gh0st RAT
Security
8 Minute Read

Not Just Annoying Ads: Adware Bundles Delivering Gh0st RAT

Detect and defend against the Gh0st RAT and CloverPlus adware bundle – explore TTPs, persistence mechanisms, and actionable Splunk detection strategies.
Navigating NIS2 - Accelerating IT/OT Security in Manufacturing with Splunk, Claroty and AWS
Security

Navigating NIS2 - Accelerating IT/OT Security in Manufacturing with Splunk, Claroty and AWS

Explore the 3 biggest manufacturing challenges in 2026: NIS2 compliance, cyber risks, and IT/OT convergence. Learn how an integrated ecosystem from Claroty, AWS, and Splunk enables a secure risk reduction journey for your industrial operations. Stay resilient and compliant in a connected world.
Built for Speed, Stuck in Neutral: Why Splunk ES Deployments Stall
Security
10 Minute Read

Built for Speed, Stuck in Neutral: Why Splunk ES Deployments Stall

Why do Splunk Enterprise Security deployments stall? A Security TAM outlines five common pitfalls and how to unlock better outcomes.
Splunk Security Content for Threat Detection & Response: March Recap
Security
5 Minute Read

Splunk Security Content for Threat Detection & Response: March Recap

In March, the Splunk Threat Research Team had two releases of new security content via the Enterprise Security Content Update app.