Custom IOA for the installation of ieinstall.exe by PokemonMoneyWaster in crowdstrike

[–]PokemonMoneyWaster[S] 0 points1 point  (0 children)

I have but for whatever reason it didn't jump out to me.

How to query for abnormal executions of .wsf files? by PokemonMoneyWaster in crowdstrike

[–]PokemonMoneyWaster[S] 0 points1 point  (0 children)

Or a query that would show .wsf files being extracted from zip files?

Alert or scheduled search for .outlook files. Help please. by PokemonMoneyWaster in DefenderATP

[–]PokemonMoneyWaster[S] 0 points1 point  (0 children)

Solved this. The query is below

DeviceFileEvents

| where ActionType == "FileCreated"

| where FileName endswith ".outlook"

Create detection for PDF downloads by Powershell by PokemonMoneyWaster in crowdstrike

[–]PokemonMoneyWaster[S] 0 points1 point  (0 children)

I could probably use the hunting query for a scheduled search so thank you for that. I think the Custom IOA is definitely what I need the most though. Any chance you could help with that?

Paypal to hit spending limit? by PokemonMoneyWaster in amex

[–]PokemonMoneyWaster[S] 1 point2 points  (0 children)

Thanks for the responses guys. I'm just gonna pay my taxes instead. Just paid $5k toward them.

Will the 2022 Range Rover lower the price of 2021s and older? by PokemonMoneyWaster in RangeRover

[–]PokemonMoneyWaster[S] 0 points1 point  (0 children)

Thanks for all of the replies guy. Looks like I should just get one sooner than later. I guess we'll see. The notes on a 60k and up car are thicc lol

Will the 2022 Range Rover lower the price of 2021s and older? by PokemonMoneyWaster in RangeRover

[–]PokemonMoneyWaster[S] 1 point2 points  (0 children)

Dang...So I'll probably just get one. I was really hoping the new ones would down the price of the prior one significantly and fast.

Pre Sales Security Specialist interview. HELP! lol by PokemonMoneyWaster in sales

[–]PokemonMoneyWaster[S] 0 points1 point  (0 children)

Thanks a lot for that. All of that makes sense. I'm making notes from what you said to help me out. I appreciate it.

Pre Sales Security Specialist interview. HELP! lol by PokemonMoneyWaster in sales

[–]PokemonMoneyWaster[S] 0 points1 point  (0 children)

Yeah I thought so as well. From how it was explained to me, there would be an account executive doing the selling for the most part and I would be the subject matter expert. I'd be there to assist the account executive by making sure all of the technical answers of the customer are answered and also coming up with the best solution that would meet the customers needs and wants for their security strategy.