Forum Discussion
technowooki
9 months agoBronze II
APT29 Threat Hunting with Splunk: Ep.11 – Demonstrate Your Skills - Question to Q9
Hello everyone I can't find the solution to question 9 (How many file types were exfiltrated at this stage?) in APT29 Threat Hunting with Splunk: Ep.11 - Demonstrate Your Skills. I thought it was th...
- 9 months ago
you should find something like:
ParameterBinding(Get-ChildItem): name="Include"; value="*.doc, *.xps, ....just count all the fileendings and count them.
steven
Ambassador
9 months agoyou should find something like:
ParameterBinding(Get-ChildItem): name="Include"; value="*.doc, *.xps, ....just count all the fileendings and count them.
- technowooki9 months agoBronze II
Thx for the help. :)