Threat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 7

Question

In relation to&nbsp;What is the device that tcpdump is dumping packets from?For some reason&nbsp;win-host-1.asgard.corp and&nbsp;win-host-1 does not work and&nbsp;NPF_{B1ADE8FD-CC9A-4857-9C50-28078779F038},I am wondering babout what I am doing wrong in terms of approaching this question, and How I should be redirecting my attention instead.&nbsp;10.10.10.30 does not work as well

samdickison · Answer

Hey kevinh​, could it be the \Device\NPF_.....?&nbsp; in the document table

Forum Discussion

Threat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 7

1 Reply

Featured Places

Help

Related Content

Threat Actors: Mint Sandstorm – Campaign Analysis - Question 9

Threat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 3

Malware Analysis: Tracking a LOLBins Campaign – Acquisition

Malware Analysis: Tracking a LOLBins Campaign – Examination

Malicious Document Analysis: Dropper Analysis

Recent Discussions

Threat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 7

Ethereum: The Blockchain, Transactions, and Explorers

Microsoft Sentinel SOAR: Demonstrate Your Skills

Cannot seem to connect to Snaplabs via VPN

Threat Actors: Salt Typhoon – SNAPPYBEE Campaign Analysis - Question 3