This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About r_gine
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About r_gine
10-29-2019
10Posts
1Like
0Solutions
Oct 29, 2019Last Visited
User
Activity
User
Profile
Latest posts by r_gine
| Subject | Views | Posted |
|---|---|---|
| 2632 | 12-11-2018 06:01 PM | |
| 6235 | 10-10-2018 07:05 PM | |
| 2486 | 10-26-2017 10:34 AM | |
| 2487 | 10-26-2017 10:33 AM | |
| 2529 | 06-21-2017 11:54 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 12-11-2018 06:01 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 08-06-2015 08:29 AM |
| Date Last Visited | 10-29-2019 06:58 PM |
| Posts | 10 |
| Total Likes Received | 1 |
12-11-2018
06:01 PM
1 Kudo
I’m having an issue identifying the offending file that triggered a vulnerability detection. We had an IT admin transfer a large batch of files across a network segment that traveled on of or PA firewllls. One of the transfers triggered an alert for an Adobe Reader remote code execution signature. The “file name” in Panorama shows “content.xml” but does not show the actual name of the file that contained code that matched the signature. How does one find the actual offending file in instances like this? We’ve encounteed similar issues with the virus profile too. During the transfer of files the palo will alert on a virus detection but will not show the actual name of the malicious file. This makes response very challenging.
... View more
10-10-2018
07:05 PM
I'm curious if you ever got this working? I'm interested in pulling in CS IoC data into MineMeld
... View more
10-26-2017
10:34 AM
Outside of WildFire... The Firewall calculates file hashes for all files so why don't they log that information? WildFire is a pretty poor sandbox appliance.
... View more
10-26-2017
10:33 AM
I dont even see how this is possible... why would they not store this information? This is insane -- this information is would be very useful from a security monitoring and threat intelligence aspect.
... View more
06-21-2017
11:54 AM
Does anybody know where to find the associated file hashes for files from the threat or data filtering log? I know Palo is generating file hashes on files because that's how they're determing what to send to WildFire but I can't find a file lash log anywhere. I would like to see this in the data filtering log.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-29-2019
06:58 PM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks