Tag: SURGe

Accompanying today’s announcement from CISA (BOD 22-01) and their new Known Exploited Vulnerabilities Catalog, SURGe and Splunk Threat Research Team (STRT) have coordinated to add functionality into Enterprise Security Content Updates (ESCU). This added functionality will help network defenders understand vulnerability context alongside relevant ESCU detections.

Software supply chain attacks are not going away. As our network defenses improve, adversaries must move up the chain to stay a step ahead of our defenses.

Splunk has a new security research team focused on in-depth analysis of the latest cybersecurity news to help the public navigate security incidents with confidence using Splunk.

The autoregression command, which is a centralized streaming command, is used to calculate a moving average. Learn how to use this command to gather information, just in time for Boss of the SOC v6!

This blog post describes how to use VPC data from AWS in Splunk to hunt hunt hunt!

This blog post reviews AWS cloudtrail as a security logging source and how to hunt in it

This blogs reviews how to hunt through osquery logs

This blog post describes how to use Azure Active directory for basic hunting and discovery

This blog reviews the data that comes out of Office365 and how to use it to hunt in Splunk.