Forum Discussion
technowooki
Bronze II
4 months agoAPT29 Threat Hunting with Splunk: Ep.11 – Demonstrate Your Skills - Question to Q9
Hello everyone I can't find the solution to question 9 (How many file types were exfiltrated at this stage?) in APT29 Threat Hunting with Splunk: Ep.11 - Demonstrate Your Skills. I thought it was th...
- 4 months ago
you should find something like:
ParameterBinding(Get-ChildItem): name="Include"; value="*.doc, *.xps, ....
just count all the fileendings and count them.
steven
Silver II
4 months agoyou should find something like:
ParameterBinding(Get-ChildItem): name="Include"; value="*.doc, *.xps, ....
just count all the fileendings and count them.
- technowooki4 months ago
Bronze II
Thx for the help. :)