+1
Dear Cymulate Team
Could you give us all the file path for CymulateLM.exe?
In the customer environment, only the file path can be registered for the whitelist.
The customer uses Symantec Endpoint Protection (SEP) 14.
Only file name and hash value can not be registered.
Therefore, we would like to know the file path where CymulateLM.exe is stored.
Thank you!
Best answer by Liel Evron
View originalUnfortunately, due to the nature of the Lateral Movement binaries, they move to different directories on each target to avoid basic detection.
Please see if this article contained what you are looking for:
https://knowledge.broadcom.com/external/article/178088/block-or-log-unauthorized-software-with.html
No account yet? Create an account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
