This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About VenuK
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About VenuK
01-27-2023
7Posts
0Likes
0Solutions
Jan 27, 2023Last Visited
User
Activity
User
Profile
Latest posts by VenuK
| Subject | Views | Posted |
|---|---|---|
| 66 | 01-25-2023 08:27 PM | |
| 131 | 01-24-2023 12:58 AM | |
| 79 | 01-23-2023 10:01 PM | |
| 263 | 12-13-2022 06:53 PM | |
| 284 | 12-13-2022 06:14 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 09-22-2022 04:04 AM |
| Date Last Visited | 01-27-2023 03:18 AM |
| Posts | 7 |
01-24-2023
12:58 AM
Dear Team,
We wanted to restrict compilers on our environment after a pentest resulted with Compile Payload Source Code Locally, we have common compilers like csc.exe and GCC/MinGW.
We wanted to know how to identify any common suspicious behavior exe's along with the csc.exe and GCC/MinGW compilers, suggest me the best way to restrict the compilers.
... View more
01-23-2023
10:01 PM
Dear All,
I would like to know how to build a query to troubleshoot issues on a host where I wanted to list the processes running on the host and also to identify which is causing the issue. I am writing the below query to find no details, please help.
preset = xdr_process | filter agent_hostname contains "Host1" or agent_hostname contains "Host2"
Thank you all in advance.
... View more
12-13-2022
06:53 PM
You are really awesome @bbucao , this works
... View more
12-13-2022
06:14 PM
Dear All,
We are trying to understand that, there are certain applications installed on a host by using the below query. preset = host_inventory_applications |filter endpoint_type = "AGENT_TYPE_WORKSTATION" |filter application_name in("Application A","application B", "Application C") | comp latest(report_timestamp) by endpoint_name, application_name | dedup endpoint_name, application_name | sort asc endpoint_name | fields endpoint_name, application_name
By running the above query, the result is that, we are getting hostname, application name etc, but we would like to get the result like the below.
Host Name, Applicatioin A, Application B etc, instead of duplicate entries of host with different applications.
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks