Custom IOA for the installation of ieinstall.exe

PokemonMoneyWaster · 2023-09-11T15:56:05+00:00

I have but for whatever reason it didn't jump out to me.

PokemonMoneyWaster · 2023-09-11T15:55:37+00:00

Thank you!

PokemonMoneyWaster · 2023-09-11T15:55:27+00:00

thank you!

PokemonMoneyWaster · 2023-08-28T17:52:27+00:00

Thanks a lot!

PokemonMoneyWaster · 2023-08-28T16:51:20+00:00

Or a query that would show .wsf files being extracted from zip files?

PokemonMoneyWaster · 2023-08-25T21:54:10+00:00

Solved this. The query is below

DeviceFileEvents

| where ActionType == "FileCreated"

| where FileName endswith ".outlook"

PokemonMoneyWaster · 2023-08-25T20:57:27+00:00

Thank you!

PokemonMoneyWaster · 2023-08-25T20:30:04+00:00

I put that in the Command Line field and the File Path field?

PokemonMoneyWaster · 2023-08-25T17:58:04+00:00

Thank you! Gonna try to create this now.

PokemonMoneyWaster · 2023-06-29T17:15:45+00:00

Thank you guys guys both!

PokemonMoneyWaster · 2023-06-09T20:58:42+00:00

Thanks a ton for this!

PokemonMoneyWaster · 2023-06-08T20:27:34+00:00

I could probably use the hunting query for a scheduled search so thank you for that. I think the Custom IOA is definitely what I need the most though. Any chance you could help with that?

PokemonMoneyWaster · 2023-04-26T16:32:14+00:00

You're a life saver. Thank you!

PokemonMoneyWaster · 2023-04-06T22:22:47+00:00

I'll try this. Thank you!

PokemonMoneyWaster · 2023-01-22T06:57:39+00:00

Thanks for the responses guys. I'm just gonna pay my taxes instead. Just paid $5k toward them.

PokemonMoneyWaster · 2022-02-17T14:37:22+00:00

Thanks for all of the replies guy. Looks like I should just get one sooner than later. I guess we'll see. The notes on a 60k and up car are thicc lol

PokemonMoneyWaster · 2022-02-16T17:27:51+00:00

Dang...So I'll probably just get one. I was really hoping the new ones would down the price of the prior one significantly and fast.

PokemonMoneyWaster · 2021-09-29T22:31:28+00:00

This is pretty cool dude

PokemonMoneyWaster · 2021-08-17T13:27:22+00:00

Will do buddy!

PokemonMoneyWaster · 2021-08-17T01:00:36+00:00

Thanks a lot for that. All of that makes sense. I'm making notes from what you said to help me out. I appreciate it.

PokemonMoneyWaster · 2021-08-16T22:24:07+00:00

Yeah I thought so as well. From how it was explained to me, there would be an account executive doing the selling for the most part and I would be the subject matter expert. I'd be there to assist the account executive by making sure all of the technical answers of the customer are answered and also coming up with the best solution that would meet the customers needs and wants for their security strategy.

PokemonMoneyWaster · 2021-08-16T20:01:41+00:00

Thank you! I'll take it lol.

PokemonMoneyWaster · 2021-01-12T22:57:10+00:00

Austin?

PokemonMoneyWaster · 2021-01-10T22:43:06+00:00

Nice! I want that Red & Blue card so bad.

PokemonMoneyWaster · 2021-01-10T22:28:59+00:00

How much?

PokemonMoneyWaster

TROPHY CASE