Forum Discussion

kevinh's avatar
kevinh
Silver I
2 months ago
Solved

Threat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 7

In relation to  What is the device that tcpdump is dumping packets from? For some reason  win-host-1.asgard.corp and  win-host-1 does not work and  NPF_{B1ADE8FD-CC9A-4857-9C50-28078779F038}...
  • SamDickison's avatar
    2 months ago

    Hey kevinh​, could it be the \Device\NPF_.....?  in the document table