Forum Discussion
technowooki
1 year agoBronze II
APT29 Threat Hunting with Splunk: Ep.11 – Demonstrate Your Skills - Question to Q9
Hello everyone I can't find the solution to question 9 (How many file types were exfiltrated at this stage?) in APT29 Threat Hunting with Splunk: Ep.11 - Demonstrate Your Skills. I thought it was th...
- 1 year ago
you should find something like:
ParameterBinding(Get-ChildItem): name="Include"; value="*.doc, *.xps, ....just count all the fileendings and count them.
steven
Ambassador
1 year agoyou should find something like:
ParameterBinding(Get-ChildItem): name="Include"; value="*.doc, *.xps, ....just count all the fileendings and count them.
- technowooki1 year agoBronze II
Thx for the help. :)