I'm trying to see if I can pull a data packet from the RealSecureDB using SQL commands. I found a command 'iss_GetSensorDataPacket', but I'm not quite sure as to what delimeters it needs to run.
Basically, I have an event where a user is downloading a Windows executable, but its only showing up as the alert Content_Incorrect_Extension in the console. The actual executable filename isn't showing up; the only thing that I see is 'Windows exe' in the Content Found column. Does anybody know if I can pull the filename information from the DB? Bryan C. Bussard Associate of (ISC)² ----------------------------------------- Systems Admin / Systems Engineer DS Network Monitoring Center; DS/SI/CS/MIRD Department of State - Bureau of Diplomatic Security SA-26 NMC: 301-985-8081 CLASSIFICATION: UNCLASSIFIED This e-mail is unclassified based on the definitions provided in E.O. 13292 _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
