Detecting Trickbot with Splunk

[sorangutan]

The Splunk Threat Research Team has assessed several samples of Trickbot, a popular crimeware carrier that allows malicious actors to deliver multiple types of payloads. Use our pre-built Splunk detections to detect Trickbots.

https://www.splunk.com/en_us/blog/security/detecting-trickbots.html