-
5 years, 7 months ago
mjeffery commented on the post, Windows RDP sessions
In reply to: thall wrote a new post Windows RDP sessionsHere is a dashboard I built to look at Windows Logon Type 2 & 10 (remote & remote interactive) that will help identify which users access which servers and […] ViewThe problem is that the User field input is not configured correctly. It does nothing actually. I’m working on fixing the input, test it and post the code here
-
7 years, 9 months ago
mjeffery wrote a new post
sourcetype=”apache:access” http_method=POST request=”*{ :;};*” OR request=”*/bin/*”
A very simple query to detect attempts at running Linux commands on an Apache web server. The POST http request is where t […]
-
7 years, 10 months ago
mjeffery became a registered member
-
7 years, 10 months ago
mjeffery became a registered member
