 |
Posts by [email protected] |
 |
Post #AjmzA9qsQ6Yyyx3ps8 by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@TheDFIRReport LogScale/Humio |
|
|
|
Post #AjnG635lJGak4xeLkO by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@TheTomas @wdormann Outbound Windows firewall rule denying mshta should also wo… |
|
|
|
Post #Ak6PoXqYtwucHG4Usq by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@tinker Even Companies who used the N-1 and N-2 sensor update policies were equ… |
|
|
|
Post #Ak6Xtkn901OpVST3Lc by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@Viss @jerry to my knowledge this affected deployments with automatic updates t… |
|
|
|
Post #ApFJWYgZlCkLvjfslU by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@GossiTheDog zeek dce_rpc.log with operation containing 000c1025 looks promisin… |
|
|
|
Post #Ax86EFfG7tek2lohiC by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@chrissanders88 1. Sysmon/EDR logs if available.2. Network logs if available.3.… |
