timo92700 comments

Repositories
Issues
Comments

Results 3 comments of


                                            timo92700

host_fqdn field not correctly extracted due to TA-windows new versions

Hello, thank you for your answer. We are using WinEventLog and not XMLWinEventLog sourcetype ( rederXML is at false in the inputs.conf ) for sysmon collect. It may explain why...

host_fqdn field not correctly extracted due to TA-windows new versions

Ok thanks ! Maybe warn the users in the README / Documentation of ThreatHunting app that the xml sourcetype for sysmon collect is preferable for it to work correctly.

Failed to load prog: 'Permission denied'

Hello, Same issue here, on RHEL8.6 : Still no ETA on a possible fix ?