ShukruN

T1015 - Accessibility Features - Possible Fix to Current Hunt

1

So I've been examining this hunt/detection and I have attempted to recreate the conditions for this hunt and while doing so I have encountered a possible incorrect logic presented in...

Netscan return PID -1 for Established/Close_Wait/Close connections • WinServer2008R2SP1x64

8

Hello, just as the title says, i am using netscan on a memory dump i did, and all of the established/close_wait and some of the closed connections are returning PID...

Support for schema 4.2

3

Do you plan on supporting schema 4.2 any time soon?