This blog, the Splunk Threat Research Team (STRT) showcases a year's evolution of QakBot. We also dive into a recent change in tradecraft meant to evade security controls. Last, we reverse engineered the QakBot loader to showcase some of its functions.

Looking for your next read? Our security experts picked the very best security books, guides & articles. From hobbyists to pros, we’ve got books for you!

The holidays are upon us and with that comes booming business and bad actors. Ensuring your business and systems are secure, available and resilient is critical.

Splunk and Amazon Web Services (AWS) are celebrating 10 years of strategic collaboration this year – and what a decade it’s been!

We're proud to be one of the early partners of Amazon Security Lake, allowing joint Splunk and AWS customers to efficiently ingest the OCSF-compliant data to help improve threat detection, investigation and response.

We ran over 400,000 instances of malware to see how good ClamAV really is. Here's the data.

Hello, everyone! Welcome to the Splunk staff picks blog. Each month, Splunk security experts curate a list of presentations, whitepapers, and customer case studies that we feel are worth a read. We hope you enjoy.

On 28th November, European Member States formally adopted the revision of the Network and Information Security Directive (NIS2) (EN, DE, FR). The Directive will enter into force before the end of the year, but will only be applicable after EU Member States transpose the Directive into national law - by September 2024. So now is the time for a heads-up about the upcoming changes and what they will mean for your cybersecurity operations.

Today's complex environments require IT teams to find new ways to monitor and measure SAP — but traditional SAP monitoring tools can't cut it. Here's how to rethink your approach to SAP monitoring.