Forum Discussion

kevinh's avatar
kevinh
Bronze III
26 days ago
Solved

Threat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 7

In relation to  What is the device that tcpdump is dumping packets from? For some reason  win-host-1.asgard.corp and  win-host-1 does not work and  NPF_{B1ADE8FD-CC9A-4857-9C50-28078779F038}...
  • SamDickison's avatar
    21 days ago

    Hey kevinh​, could it be the \Device\NPF_.....?  in the document table