topic Re: Windows System32 Directory File Creation in Network Security https://community.cisco.com/t5/network-security/windows-system32-directory-file-creation/m-p/1419631#M67590 <HTML><HEAD></HEAD><BODY><P>Hi Johan,</P><P></P><P>I tried using that but, the report doesn't seem to shows any useful info. Please let me know if we have any other possible way to investigate this cause.</P><P></P><P>Thanks,</P><P>Sameer</P></BODY></HTML> Mon, 26 Apr 2010 06:42:23 GMT sameer.devlekar 2010-04-26T06:42:23Z Windows System32 Directory File Creation https://community.cisco.com/t5/network-security/windows-system32-directory-file-creation/m-p/1419629#M67584 <P>Hi Folks,</P><P></P><P>I get sevral alerts from my IDS system says, "Windows System32 Directory File Creation" as an event.</P><P></P><P>Could you please help me out understand the exact meaning for this alerts.</P><P></P><P>Thanks in advance,</P><P></P><P>Sameer</P> Sun, 10 Mar 2019 11:58:18 GMT https://community.cisco.com/t5/network-security/windows-system32-directory-file-creation/m-p/1419629#M67584 sameer.devlekar 2019-03-10T11:58:18Z Re: Windows System32 Directory File Creation https://community.cisco.com/t5/network-security/windows-system32-directory-file-creation/m-p/1419630#M67587 <HTML><HEAD></HEAD><BODY><P>Hi</P><P></P><P>This is pretty straith forward. A file has been created in the ..%windowsroot%\system32 directory.</P><P>If you turn on verbose logging for this signature you can see what file has been created.</P><P></P><P>Br</P><P></P><P>Johan Kellerman</P></BODY></HTML> Fri, 23 Apr 2010 07:40:14 GMT https://community.cisco.com/t5/network-security/windows-system32-directory-file-creation/m-p/1419630#M67587 johan.kellerman 2010-04-23T07:40:14Z Re: Windows System32 Directory File Creation https://community.cisco.com/t5/network-security/windows-system32-directory-file-creation/m-p/1419631#M67590 <HTML><HEAD></HEAD><BODY><P>Hi Johan,</P><P></P><P>I tried using that but, the report doesn't seem to shows any useful info. Please let me know if we have any other possible way to investigate this cause.</P><P></P><P>Thanks,</P><P>Sameer</P></BODY></HTML> Mon, 26 Apr 2010 06:42:23 GMT https://community.cisco.com/t5/network-security/windows-system32-directory-file-creation/m-p/1419631#M67590 sameer.devlekar 2010-04-26T06:42:23Z