This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About Kamal.Kishore
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Kamal.Kishore
08-30-2023
4Posts
0Likes
0Solutions
Aug 30, 2023Last Visited
User
Activity
User
Profile
Latest posts by Kamal.Kishore
| Subject | Views | Posted |
|---|---|---|
| 3309 | 12-15-2021 11:00 AM | |
| 3346 | 12-15-2021 10:04 AM | |
| 3508 | 12-15-2021 09:20 AM | |
| 1503 | 12-23-2020 02:05 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 03-27-2020 03:50 PM |
| Date Last Visited | 08-30-2023 01:55 PM |
| Posts | 4 |
12-15-2021
11:00 AM
Hi Fmoixsante, Thank you for your response. That's a great query to identify where Excel.exe is running but I don't see any data pertaining to macro events.
... View more
12-15-2021
10:04 AM
Ya I wouldn't know the hash value, it would be a general search or audit looking for any Office Macros by their file properties.
... View more
12-15-2021
09:20 AM
Can Cortex see if macros have been launched on an endpoint, specifically Office Macros? I tried the "All Actions" query and searched for .doc and .xls files but no luck. Has anyone tried to search for macros using Cortex query or xql? Just to clarify, I was trying to hunt for any macro executions seen on our endpoints whether they are malicious or not.
... View more
- Tags:
- XQL
12-23-2020
02:05 PM
How would I go about generating a report of all applications being seen in Cortex/Network? I would like to conduct an audit of the applications being used in our network for risk analysis. Would XQL Search or Native Search be the best place? Thank you!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-30-2023
01:55 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks