Forum Discussion

Bronze III

4 days ago

Threat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 7

In relation to What is the device that tcpdump is dumping packets from? For some reason win-host-1.asgard.corp and win-host-1 does not work and NPF_{B1ADE8FD-CC9A-4857-9C50-28078779F038}...

help & support

immersive labs

SamDickison

Community Manager

8 hours ago

Hey kevinh, could it be the \Device\NPF_.....? in the document table

Forum Discussion

Threat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 7

Featured Places

Help

Related Content

Threat Actors: Mint Sandstorm – Campaign Analysis - Question 9

Threat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 3

Malware Analysis: Tracking a LOLBins Campaign – Acquisition

Malware Analysis: Tracking a LOLBins Campaign – Examination

Malicious Document Analysis: Dropper Analysis

Recent Discussions

Threat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 7

Ethereum: The Blockchain, Transactions, and Explorers

Microsoft Sentinel SOAR: Demonstrate Your Skills

Cannot seem to connect to Snaplabs via VPN

Threat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 3