Video Screencast Help

Search

Search results

To build on my last IR article: How to utilize SEP 12.1 for Incident Response - PART 6 I'm attaching a custom IPS policy which will detect the download of various filetypes via HTTP and HTTPS. The signatures are in Allow mode ...
Download by ᗺrian | 05 Jan 2015 | 2 comments
Attached is a perl script written by Oliver Karow from Symantec.  This script is designed to allow you to automate the download of the DeepSight Vulnerability Datafeed. deepsight.pl_.tar.gz Hi, I am using windows 7 Hi, I ...
Download by Tim G. | 25 Jul 2013 | 2 comments
This is an Application Control Policy used to block psexec.exe.  This policy will block psexec.exe based on: - fingerprint -services/processes -filename The action is block and notification is set to display a pop up. There is a ...
Download by Philly Flyer | 16 Aug 2012 | 2 comments
Hello, On March 13, 2012, Microsoft released its scheduled patch update for March 2012. This month's update included a critical Remote Desktop Protocol (RDP) patch (MS12-020) that can be exploited for remote unauthenticated code-execution. ...
Download by Mithun Sanghavi | 26 Mar 2012 | 1 comment
Hello, W32.Sality is a file infector that spreads by infecting executable files and by replicating itself across network shares. Infected hosts join a peerto-peer network used to propagate malware on the compromised computer. Typically, those ...
Download by Mithun Sanghavi | 07 Oct 2011 | 1 comment
This tool is awesome on the fight against W32.Downadup on large networks. Use this tool to quickly identify infected systems and machines. If you find infected machines, you should MS-patch KB958644 and reboot them to cleanup the system. ...
Download by FbacchinZF | 06 Oct 2011 | 5 comments
This is a small Reg file that disables autorun feature via registry. We use it for non-domain or 3rd-part PC's where disabling autorun via policy is not possible. hope you find it useful... disableautorun.zip ...
Download by FbacchinZF | 21 Oct 2010 | 2 comments
This software will scan your network with Conficker/Downadup infections. ConfickerScanner.zip Thanks a lot for this tool. Thanks a lot for this tool. Conficker Scanner dear Jomargonjales i try this tool on winxp ...
Download by jomargonzales | 09 Feb 2010 | 9 comments
I've built a custom IPS policy to block Aurora exploit and I've used Metasploit's IE_Aurora module to attack my virtual machine and guess what, SEP blocked the attack. Attached you'll have the policy file and a screenshot. Please ...
Download by Aaed Alqarta | 22 Jan 2010 | 2 comments
This will manually remove Daprosy on your computer. Please see the attached file and read the procedure. Daprosy.zip (Security, 11.x, Endpoint Protection (AntiVirus), Emerging Threats, Malicious Code, Security Risks, ...
Download by jomargonzales | 21 Oct 2009 | 0 comments