Forum Discussion
Hafnium: Detection of IoCs - Question 5
For the
Which web shell in the auth folder matches those detected in the Microsoft report?
What does the question mean by Microsoft Report? is it talking about the PowerShell ISE output?
even then, based on the output
I cant seem to find the files that was referenced in the auth folder.
Summary: I am wondering about what the question means by Microsoft Report and where I can find it. Or if I am simply looking in the wrong direction
nevermind, the microsoft report related was observed generally <-- data on the insight of common file names was parsed through Gemini for accelerated research
1 Reply
nevermind, the microsoft report related was observed generally <-- data on the insight of common file names was parsed through Gemini for accelerated research
