Lightkun Yagami
@lightkun_CrowdStrikerCompletionist
2 followers0 downloads291 copies2 likes2,688 views
11 detections
Filters
Last updated
All Time
Detection languages
11
Categories
1
1
Platforms
9
1
1
Products / Services
11
CVEs
1
1
1
1
1
IDS Protocols
1
This searches for both network and process events. Shows only public IP addresses, and drops any empty IP address field. Enriches the search with any of the three ImageFileNames: SnippingTool.exe, ScreenSketch.exe, and SnipAndSketch.exe, and only where ms-screensketch is in the commandline. The result will be in a table format showing the timestamp, computername, imagefile name, remote IPv4 address, and the commandline.
Page 2 of 2