Security Blogs

Latest Articles

Ghost in the Web Shell: Introducing ShellSweep
Security
7 Minute Read

Ghost in the Web Shell: Introducing ShellSweep

Splunk introduces ShellSweep, a suite of utilities designed to detect and combat malicious web shells in servers.
Hunting M365 Invaders: Blue Team's Guide to Initial Access Vectors
Security
17 Minute Read

Hunting M365 Invaders: Blue Team's Guide to Initial Access Vectors

Discover insights from the Splunk Threat Research Team on Microsoft 365 threat detection, focusing on data source analysis and effective methods for hunting initial access threats.
OT Security Is Different, Isn’t IT?
Security
5 Minute Read

OT Security Is Different, Isn’t IT?

Explore the differences between OT security and IT security, delving into industry-specific challenges and solutions, with insights into the Purdue Model and how Splunk can help.
Splunk Enterprise Security 7.3 Delivers a Refined Analyst Experience and Enhanced Risk Context for Seamless Incident Triage
Security
3 Minute Read

Splunk Enterprise Security 7.3 Delivers a Refined Analyst Experience and Enhanced Risk Context for Seamless Incident Triage

Announcing Splunk Enterprise Security 7.3, delivering a refined analyst experience and enhanced risk context for seamless incident triage.
Staff Picks for Splunk Security Reading December 2023
Security
2 Minute Read

Staff Picks for Splunk Security Reading December 2023

Splunk security experts share their December list of presentations, whitepapers, and customer case studies that they feel are worth a read.
Introducing Our New SOAR Integrations: Why Panorama and FortiManager Users Should Be Excited
Security
1 Minute Read

Introducing Our New SOAR Integrations: Why Panorama and FortiManager Users Should Be Excited

The Splunk SOAR team shares more on the latest firewall management apps introduced in Splunk SOAR 6.2.
Old School vs. New School
Security
6 Minute Read

Old School vs. New School

The Splunk SURGe team examines the claim that generative AI will empower threat actors to improve the scale and/or efficiency of their spear-phishing campaigns.
Deploy, Test, Monitor: Mastering Microsoft Defender ASR with Atomic Techniques in Splunk
Security
17 Minute Read

Deploy, Test, Monitor: Mastering Microsoft Defender ASR with Atomic Techniques in Splunk

Explore Microsoft Defender ASR's role in cybersecurity with Splunk and learn deployment, testing, and monitoring strategies for robust defense.
Updated Baseline Creation and Dashboards in OT Security Add-on for Splunk Version 2.3
Security
3 Minute Read

Updated Baseline Creation and Dashboards in OT Security Add-on for Splunk Version 2.3

Version 2.3 of the OT Security Add-on for Splunk is here and it delivers three main updates.