SYSTEMCONF

How to Set Log Send to Splunk SIEM via Carbon Black EDR?

We will make settings via Carbon Black Response to send Log to Splunk SIEM via Carbon Black EDR. First, the “Event Forwarder” module must be …

Critical BIG-IP iControl REST Vulnerability – CWE-306, CVE-2022-1388

by ÖMER0

Critical BIG-IP iControl REST Vulnerability Allows Arbitrary Code Execution. The vulnerability, discovered by F5 on May 4, allows threat actors to bypass iControl REST authentication. …

Adding Rules in “McAfee Access Protection” and “McAfee EDR Triggers”

by ÖMER0

We will explain how to add a rule in “McAfee Access Protection” and “McAfee EDR Triggers“, the rule for the “CVE 2022-29072” vulnerability, where you …

What is NTP Server? NTP Server Installation on CentOS 6/7/8

by ÖMER0

It is a server that provides time information to NTP (Network Time Protocol) clients. NTP peer is a server that provides and receives time from …

About Mcafee Antivirus(Adaptive Threat Protection) Application Blocking

by ÖMER0

McAfee Antivirus Adaptive Threat Protection module provides protection against advanced threats. There are 184 rules in McAfee Adaptive Threat Protection. It is stuck in the …

RPC Vulnerability Used with Microsoft SMB – CVE-2022-26809

by ÖMER0

Microsoft has reported an update for a vulnerability targeting Windows hosts running RPC (Remote Process Call Runtime) used with SMB. This vulnerability has been identified …

What are McAfee Threat Prevention and Adaptive Threat Protection?

by ÖMER0

McAfee’s Threat Prevention product is known as McAfee antivirus. McAfee Threat Prevention generally monitors behaviour/access-based, reputation-based, signature-based, random code studies and takes action according to …