<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Name: Suspicious Abnormal RPC Request Found (Unique Threat ID: 38713) in Advanced Threat Prevention Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/advanced-threat-prevention/name-suspicious-abnormal-rpc-request-found-unique-threat-id/m-p/502985#M1657</link>
    <description>&lt;P&gt;How can I resolve this kind of alert on our internal network?&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;P&gt;The source is our Manage Switch and the destination is our MPLS.&amp;nbsp;&lt;/P&gt;&lt;P&gt;The alert source comes from the PAN NGFW.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you in advance for your response.&lt;/P&gt;&lt;P&gt;I hope you can help me to strengthen my analysis.&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Mon, 13 Jun 2022 05:16:34 GMT</pubDate>
    <dc:creator>EJaspe</dc:creator>
    <dc:date>2022-06-13T05:16:34Z</dc:date>
    <item>
      <title>Name: Suspicious Abnormal RPC Request Found (Unique Threat ID: 38713)</title>
      <link>https://live.paloaltonetworks.com/t5/advanced-threat-prevention/name-suspicious-abnormal-rpc-request-found-unique-threat-id/m-p/502985#M1657</link>
      <description>&lt;P&gt;How can I resolve this kind of alert on our internal network?&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;P&gt;The source is our Manage Switch and the destination is our MPLS.&amp;nbsp;&lt;/P&gt;&lt;P&gt;The alert source comes from the PAN NGFW.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you in advance for your response.&lt;/P&gt;&lt;P&gt;I hope you can help me to strengthen my analysis.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 13 Jun 2022 05:16:34 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/advanced-threat-prevention/name-suspicious-abnormal-rpc-request-found-unique-threat-id/m-p/502985#M1657</guid>
      <dc:creator>EJaspe</dc:creator>
      <dc:date>2022-06-13T05:16:34Z</dc:date>
    </item>
    <item>
      <title>Re: Name: Suspicious Abnormal RPC Request Found (Unique Threat ID: 38713)</title>
      <link>https://live.paloaltonetworks.com/t5/advanced-threat-prevention/name-suspicious-abnormal-rpc-request-found-unique-threat-id/m-p/502990#M1658</link>
      <description>&lt;P&gt;Hi Ejaspe,&lt;/P&gt;
&lt;P&gt;I would suggest collecting a packet capture and open a support case to check if it's False Positive or not.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;FYI:&lt;BR /&gt;How to Submit a Vulnerability Signature False Positive&lt;BR /&gt;&lt;A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSBCA0" target="_blank"&gt;https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSBCA0&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 13 Jun 2022 05:36:23 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/advanced-threat-prevention/name-suspicious-abnormal-rpc-request-found-unique-threat-id/m-p/502990#M1658</guid>
      <dc:creator>ymiyashita</dc:creator>
      <dc:date>2022-06-13T05:36:23Z</dc:date>
    </item>
  </channel>
</rss>

