Introduction: PoshC2, a powerful post-exploitation framework, has become a popular tool for adversaries to maintain persistence and execute various malicious activities within compromised networks. This blog post will delve into a simulated PoshC2 at...
Hi team, Issue: Delay in log processing on Netwitness agent in insight mode Description: We have Netwitness endpoint agent running in insight mode on a windows server. Observing a delay in collecting the logs i.e., the agent is sending the logs of 9 ...
Introduction: Simulating an RDP Misconfiguration: A Red Team vs. Blue Team Exercise This blog post details a simulated attack on a misconfigured Remote Desktop Protocol (RDP) server, showcasing how a seemingly minor configuration error can lead to co...
When will NWE agent have the ability to log ship like there is on Windows.
Dears, I have observed that EPLH agent is not able to get memory image if Device Guard Virtualization based security policy is enabled. When i check in detail came to know that mentioned policy is automatically update after some update. if Device Gua...
