Tag: Digital technology

SEPM Network Attack Notification

Symantec Community Leave a comment
I need a solution

Is it not possible to create a Notification Rule to email on a SEPM network attack detection of Critical or Higher? For example, I we received a detection on an endpoint that I was only able to see in the Log monitoring within SEPM, and did not receive an email notification for. How would I go about creating an email notification for such detections in the future? They’re too severe to just not get notified about. 

Client Affected

Computer Name

  

Current:

My-Computer1

When event occurred:

 My-Computer1

IP Address

  

Current:

fe80::11a2:11a3:3d87:ab97

When event occurred:

192.168.0.105

Local MAC:

N/A

User Name:

none

Operating system:

Windows 10 Professional Edition

Location Name:

Default

Domain Name:

Default

Group Name:

My CompanyTest

Server Name:

SYM-Server

Site Name:

Site SYM-Server

Risk Detected

Event Time:

11/14/2019 08:54:44

Begin Time:

11/14/2019 08:54:59

End Time:

11/14/2019 08:54:59

Number:

1

Signature Name:

Attack: NTLM Hash Theft Attempt

Signature ID:

31835

Signature Sub ID:

80115

Intrusion URL:

N/A

Intrusion Payload URL:

N/A

Event Description:

[SID: 31835] Attack: NTLM Hash Theft Attempt attack blocked. Traffic has been blocked for this application: SYSTEM

Event Type:

Intrusion Prevention

Hack Type:

0

Severity:

Critical

Application Name:

SYSTEM

Network Protocol:

TCP

Traffic Direction:

Outbound

Remote IP:

 192.168.0.133

Remote MAC:

N/A

Remote Host Name:

N/A

Alert:

1

Local Port:

51939

Remote Port:

139
0

Related:

  • No Related Posts

How do I attach a file with Citrix Files for Outlook?

Citrix Leave a comment

Attach Files

The Attach Files button allows you to attach files from both your PC and files stored with Citrix. Use the file browser to select the file(s) you want to share.


When you attach a file to an email, Citrix for Outlook will place a banner in the email that lists the file(s) and availability (if applicable).

User-added image

From PC

User-added image

From PC – attach files stored on your computer to your email message. When you select this option, you will be able to select the files that you wish to attach to this email. Files uploaded from your computer using this method will be uploaded to the File Box on Citrix. If you would like to use different options for this specific email, select Use Custom Settings. After attaching the desired files and composing the email, click Send to send the email. The plugin will upload the files and convert the temporary link to a functioning link in the Outbox. Then Outlook will send the email containing the link to the indicated recipient.

Emails sent using this option will stay in your Outbox longer than normal after you click send because the files must first be uploaded to Citrix.The amount of time this takes will depend on the speed of your Internet connection and the size of the attachments. Please do not close Microsoft Outlook until your upload is complete. Citrix recommends that you do not upload extremely large files (more than 500 MB) through the plugin. You will have better, more reliable results logging into and using the web application for large file uploads. You can then attach these large files using the From Citrix option detailed below.

From Citrix

User-added image

From Citrix – attach files stored in Citrix. Check the boxes to select the files and folders you want to attach to your email. Once you have selected the file and clicked OK, the file will be inserted into the body of your email as a temporary link. If you would like to use different options for this specific email, select Use Custom Settings. After attaching the desired files and composing the email, click Send to send the email. The plugin will convert the temporary link to a functioning link and Outlook will send the email containing the link to the indicated recipient.

From Citrix uses less bandwidth and storage as you are not uploading new data to your account.

Related:

  • No Related Posts

Need to send large files using Citrix Files for Outlook

Citrix Leave a comment

Sending Large Files

We do not recommend attaching large files (more than 500 MB) from your PC through the plugin. You will have better, more reliable results logging into and using the web application for large file uploads. Once you have uploaded the large file to Citrix, you can then attach these large files to an email message using How do I attach a files with Citrix Files for Outlook?

Related:

  • No Related Posts

Unable to change keyboard at preboot screen

Symantec Community Leave a comment
I need a solution

Hi everbody

I’ve new Lenovo T490s computers. At the SEE preboot screen i cannot change the keyboard. It is default on US international. Well you can change it to eg German and it accepts but remains typing in US international . Nomather whick kb layout you choose it always types US internationl

I tried by command line, and allthough rêporteed operation succesfull it does not help

Anyone has a solution???

I only have this on the new T490s machines , the former T480s posed no problem

Fredd Meiresonne

ESS schneider Electric

Belgium

0

Related:

  • No Related Posts

Microsoft Releases November 2019 Windows 10 Patch Which Fixes 74 Flaws

PCIS Support Team Leave a comment
Windows Alternatives - Feature Image
  • The November Windows patch is out, and it comes with a large number of critical fixes.
  • All users are urged to update immediately, as the patch covers a wide range of software tools and products.
  • Some known minor issues accompany this update as always, but there are workarounds.

Microsoft has just released a pretty comprehensive patch for Windows 10, bringing 74 fixes, 13 of which address critical remote code execution (RCE) flaws. The software that is covered this time ranges from the OS core and the Edge browser to the Azure Stack, the Visual Studio, and the Exchange Server. All Windows 10 users will see the update on their settings menu, and everyone is advised to apply the patches as soon as possible, as they will help you stay safe and secure against a wide variety of threats.

More specifically, here are the most critical flaws that were fixed this time:

  • Hyper-V arbitrary code execution and failure to validate input from guest OSes (CVE-2019-0721, CVE-2019-1389, CVE-2019-1397, and CVE-2019-1398)
  • Microsoft Exchange RCE flaw (CVE-2019-1373)
  • SharePoint server information disclosure flaw (CVE-2019-1443)
  • Windows TCP/IP improper IPv6 packet handling (CVE-2019-1324)
  • Windows Graphics Device Interface information disclosure flaw (CVE-2019-1439)
  • Windows Graphics Component privilege elevation vulnerabilities (CVE-2019-1407 and CVE-2019-1433)
  • Microsoft Office for Mac inability to disable macros properly (CVE-2019-1457)
  • VBScript remote code execution vulnerability (CVE-2019-1390)
  • Microsoft Scripting Engine memory corruption flaws (CVE-2019-1426, CVE-2019-1427, CVE-2019-1428, and CVE-2019-1429)

The rest of the patches concern “important” level flaws, so they are also crucial in several use-case scenarios. For example, CVE-2019-1020 is a bypass vulnerability in the Windows secure boot process, allowing an attacker to load malicious software via a third-party bootloader. With the latest patch, this threat has been blocked.

Remember, if you’re using a security solution, it will get updated with new rules to cover the disclosed vulnerabilities. However, applying the OS updates should be an absolute priority in order to defend from any form of known exploitation methods. Moreover, Microsoft delivers Windows updates in a cumulative form, so you will also get other optimizations and improvements bundled with the security fixes.

Applying this update may cause a number of side-effects which Microsoft describes in their “known issues” section. For example, the Exchange Server may greet you with a “File failed to upload” error when trying to save files on a network location, and the exchange services may remain in a disabled state. OOBE (Out of Box Experience) may also be associated with problems creating a local user through IME (Input Method Editor). Finally, renaming files and folders on a CSV (Cluster Shared Volume) may fail with the following error: “STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)”. For most of these, there are workarounds provided by Microsoft.

Are you applying these monthly patches immediately, or do you instead do it whenever you have the time? Let us know in the comments down below, or on our socials, on Facebook and Twitter.

Related:

  • No Related Posts

Unable to add new Machines to an Existing Catalog or create a new Machine catalog with error – “Failed to copy disk. Reason : HOST_OFFLINE”

Citrix Leave a comment
While adding new Machines to an Existing Catalog or while create a new Machine catalog, the Machine creation wizard fails with below exception:

Error Id: XDDS:8D0568C3

Exception:

DomainNewMachineName : [DomainNewMachineName, Could not locate the master disk image; xxxxxxxxxx/xxxxxxxxxxx.snapshot to create the virtual machine; DomainNewMachineName.

Error Details

MachineFailure

: DomainNewMachineNameInner Error:

Failed to copy disk. Reason : HOST_OFFLINE : OpaqueRef:<Action Reference GIUD>

Related:

  • No Related Posts