Solved

Where can I find CymulateLM.exe?

  • 5 September 2022
  • 1 reply
  • 58 views

Badge +1

Dear Cymulate Team

Could you give us all the file path for CymulateLM.exe?

In the customer environment, only the file path can be registered for the whitelist.
The customer uses Symantec Endpoint Protection (SEP) 14.

Only file name and hash value can not be registered.

Therefore, we would like to know the file path where CymulateLM.exe is stored.

 

Thank you!

icon

Best answer by Liel Evron 6 September 2022, 22:51

View original

1 reply

Badge

Unfortunately, due to the nature of the Lateral Movement binaries, they move to different directories on each target to avoid basic detection.
Please see if this article contained what you are looking for:
https://knowledge.broadcom.com/external/article/178088/block-or-log-unauthorized-software-with.html

Reply