Forum Discussion

technowooki's avatar
technowooki
Icon for Bronze II rankBronze II
13 days ago
Solved

APT29 Threat Hunting with Splunk: Ep.11 – Demonstrate Your Skills - Question to Q9

Hello everyone I can't find the solution to question 9 (How many file types were exfiltrated at this stage?) in APT29 Threat Hunting with Splunk: Ep.11 - Demonstrate Your Skills. I thought it was th...
  • steven's avatar
    11 days ago

    you should find something like:

    ParameterBinding(Get-ChildItem): name="Include"; value="*.doc, *.xps, ....

    just count all the fileendings and count them.