Hi everyone, Had multiple machines alerting for Absolute Software CTES files: Names: CtGeoPrvPackage.zip, GEO_Windows-GEO-1.0.13.6 SHA256: dcadf2ca20756544ac8a007a1da94e6f932770558128658280a5ece2828791da Name: abwfscnEx.dll SHA25...
Forum Posts
Hola, Estoy haciendo el curso de ciberseguridad. Todo iba bien hasta que llegué al laboratorio de Seguridad de Terminales - Atacando lo que hacemos - Servicios Empresariales. El laboratorio es "atacar una base de datos MySQL", en el cual se pide el a...
I am seeing a "virus scan failed" error on Intune-managed computers when downloading files.Additionally, I found something strange... Microsoft says the Attachment Manager setting should be under Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\...
Good Day Everyone, I "think" I have an issue with my Secure Endpoint instance.Logged in to the Secure Endpoint Portal (with full admin rights), I've created my policies and have enabled the orbital feature set on a few policies. I should be able to a...
Resolved! Scripted uninstall of AMP client
I am trying to automate the removal of the AMP client using our remote management software. I have been testing on a single workstation using the local CLI and have been unable to get a silent uninstall to work correctly. I am finding no errors in th...
Good Morning Team,I'm trying to allow HTTPS traffic sourced from an Internal server in our DMZ , to FQDNS using a rule applied to our current ACP running on our FTDs. Here is the following rule:SourceZone (object DMZ)NET (Object (Server IP)Port (Type...
Resolved! False positive?
Heyo everyone,Had a tonne of machines alerting for SHA256: 07cd10ab304ae0017dd903b91e2d68952508e5120073a27d6ae1affe5b0af198I'm pretty sure this is a false positive but I've had a look and cant find any information anywhere yet cause I think its quite...
Resolved! W32.MAP.Ransomware.rwd.
Sha 256 e5dccb33478bf13629d0a3f0ba7daceb56d7792e0132886ed129334ec6bb2a33 detected by MAP and convicted as W32.MAP.Ransomware.rwd. Found this post https://quickview.cloudapps.cisco.com/quickview/bug/CSCvq59864, my Connector version is 7.4.1.20439. N...
Stupid question, I know; But can I reference/confirm my Cisco Contract number in my CSE or Webex account?For support purposes, this would be much easier than having it external to the software. (And is done in many other software service products, o...
Resolved! What is the login URL for Cisco CSE?
What is the login URL for Cisco CSE?I know, it seems like a silly question. Hear me out:I've been using:https://console.amp.cisco.com/When I login, using the above url, sometimes it takes me to Cisco CSE;Sometimes it takes me to the Cisco Applicatio...
Hi everyone,We recently encountered a blue screen (BSOD) on one of our Windows Server 2016 systems running Cisco Secure Endpoint connector version 8.4.4.30419. At this point, we're not 100% sure if Cisco is the root cause, but the timing aligns with ...
Dear Cisco Support Team,after upgrading to Cisco Secure Endpoint 8.4.4.30419 PowerShell Scripts/Command are blocked for 5 secondsEnvironmentWindows 11 24H2Steps to reproduceOpen PowerShell ISECreate a PowerShell Script and save it as TestExecutionDur...
We are currently in the process of planning a bulk uninstallation of Cisco Secure Endpoint across multiple systems in our environment. We would appreciate your assistance in providing guidance, best practices, and any recommended tools or scripts to ...
What is the method to remove the orphaned libcurl.dll and folder?
Would like assistance , we need to decommission this asa firewall, however I have no idea what and how everything works.need to collect the routing table , and match to current Fortigate firewall and make sure everything is there on the forti then I ...
