Facebook Breach Put Data Of 50 Million Users At Risk

https://packetstormsecurity.com/news/view/29359/Facebook-Breach-Put-Data-Of-50-Million-Users-At-Risk.html

Chegg Forces Password Reset On 40 Million Users

https://packetstormsecurity.com/news/view/29362/Chegg-Forces-Password-Reset-On-40-Million-Users.html

Known DLLs

Windows Confidential The Known DLLs Balancing Act

Threat Hunting Weekly Links

Threat Hunting with Bro by Sqrrl

Splunk Notes

The bucket command will slice the Splunk timeline of events into discrete buckets of time determined by the user. The search syntax below will bucket a Splunk timeline into discrete five minute chunks, regardless of the length of the timeline:

bucket _time span=5min

The second method is provided by the Splunk search command "stats." The stats command does many things, but one of the things it does best is sorting data by other data. The following search syntax will show all DNS queries of every host in the Splunk timeline, regardless of the length of the timeline:
 
stats values(dns_query) by source_host