TL;DR Splunk fixed 60 vulnerabilities in Splunk Enterprise on August 19, 2026. Three critical flaws share a 9.4 score. Each lets an unauthenticated user with an embedded report token access data a…

TL;DR Splunk patched a critical OS command injection flaw in its AI Toolkit, tracked as CVE-2026-20266. The bug scores 9.1 and lets an admin-role user run arbitrary commands on the host. Splunk al…

TL;DR Splunk fixed 17 vulnerabilities across its apps and add-ons on August 19, 2026. The worst, CVE-2026-76404, is a critical remote code execution flaw in the MCP Server app. It scores 9.1. Splu…

Investigate suspected abuse of a trusted service account at Aurora Retail Group.

TryHackMe | Medium | Blue team | SIEM

1. Giriş ve Laboratuvar Mimarisi

A question-by-question breakdown of investigating a service-account compromise from web logs to lateral movement, using Splunk and Zeek.

Room: Benign Path: SOC Level 1 — SIEM Tools: Splunk, ANY.RUN

A DFIR walkthrough combining PCAP analysis and Splunk log correlation to reconstruct a full network intrusion — from ARP spoofing to…

Task 1 : IR Scenario