ATP and Malware protection and detection application control rule
This is version no.1 (will be updated in the future)I have exported a sanitized(from my organizations data) application control rule which covers most of the malware and ATP detection and protection...
View ArticleClik here to view.
Javascript coin miners are on the rise - and you can't see them, must read...
Hello friends,As a security administrator in my organization I can see a rising trand of JSCoinminer eventsThese events are users surfing to a web page which is infected with a malitious...
View ArticleClik here to view.
How to import SEP client package in SEPM console
SEPM console lists all available SEP client packages ready for deployment. But, at times you may have requirement for older or newer version of client package. In my case i had a situation, I have SEPM...
View ArticleSoftware Library FAQ for Software Management Solution 8.1
The Software Library and the Software Catalog provides functionality and dynamic abilities for managing Software. Sometimes these two items are used interchangeably, but they are not the same thing....
View ArticleATP and Malware protection and detection application control rule
This is version no.1 (will be updated in the future)I have exported a sanitized(from my organizations data) application control rule which covers most of the malware and ATP detection and protection...
View ArticleSymantec VIP is Secure Against New SAML Vulnerabilities
This past week, a new attack was discovered that exploits commonly used Security Assertion Markup Language (SAML) implementations. It was discovered that an attacker could modify SAML content without...
View ArticleClik here to view.
Pictured Installation of Symantec Endpoint Encryption 11.x on a Mac
The step by step guide shows the installation of SEE on MAC machinesMake sure FileVault feature on MAC should be turned on first. The encryption of the disk is done by file vault i.e native MAC...
View ArticleClik here to view.
How to enable user registration in Symantec email security.cloud
In Symantec Email security.cloud Address Registration enables you to register your known email addresses. The service can then reject email sent to any addresses, not on this list. By default, this...
View ArticleClik here to view.
Recolectar un volcado completo de memoria en máquina virtual (VM)
En primer lugar, descargaremos los archivos localmente en una máquina , en este caso Windows 7 y más adelante, usaremos la herramienta vmss2core localmente para convertirla a un archivo .DMP1)...
View ArticleClik here to view.
ATP and Malware protection and detection application control rules
Updated the rules - version 3I am using this thread to share with you my application control rules which cover most of the malware and ATP detection and protection.Used in a large healthcare enterprise...
View ArticleClik here to view.
Before your MX records are changed, Symantec.cloud is processing some of your...
First of all this is a known behaviour:When Email Services are provisioned and before your MX records are changed, Symantec.cloud may process some of your emails. Emails that are sent to your domain(s)...
View ArticleClik here to view.
Workflow - Tools - ToolPreferences Editor
Table Of Contents Application EditorBusinessTimeSpan EditorComposer Theme EditorCredentials ManagerLicense Status ManagerLocalMachineInfo EditorLog ViewerMessaging ConsoleSchedule EditorScreen Capture...
View ArticleSEP 14 How to block/Allow Samsung/Nokia Android Mobile Devices
Step By Step Method to Block/Allow Android Devices when Connected To Laptop SEP Clients.We will assume to block all the Samsung Andriod Devices1. Go to Policies > Policy Components > Hardware...
View ArticleClik here to view.
POC on SEP 14 Intrusion Prevention > Blocking Of Exploit Attacks
HiI have tested the Expolit Attacks on Win 10 SEP Clients.Tested the client by attacking on Network with viruses on win 10 , and it successfully blocked it.First we have enabled the Intrusion...
View ArticleClik here to view.
Workflow - SEP 14 - Components
With the WF 8.1 RU5 release a new set of SEP 14 Components were added to the Solution.If you create a new Project and add the Integration Library "Symantec.Components.SEP14.dll"[Install...
View ArticleClik here to view.
SEP 14MP1 With Cloud SEP14.1 > How to Log in (step by step) > Amazing Feature
Advance Protection With SEP 14.1 Cloud bundled with SEP 14MP1 Now.Below is the step by step method to Log in to SEP Cloud features:1. Open the SEPM Manager and Click on cloud then click on Get Started...
View ArticleSEPM v14.0 - Management Console Installation - Remote Client (Windows)
This article guides one to install Management Console of Symantec Endpoint Protection Manager (SEPM) v14.0 on a remote client system (Windows).Pre-requisitesPre-requisites to install Symantec Endpoint...
View ArticleClik here to view.
Inventory Solution Symantec Endpoint Protection Integration
Introduction Starting in Inventory Solution 8.1 RU6, the features to monitor the health of Symantec Endpoint Protection (SEP), to Start Agent services via a Task, is now available. These features...
View ArticleCritical Vulnerability in Microsoft Malware Protection Engine
Critical Vulnerability in Microsoft Malware Protection EngineDescriptionA vulnerability was reported in Microsoft Windows Defender. A remote user can cause arbitrary code to be executed on the target...
View ArticleClik here to view.
Software Portal platform detection introduced in ITMS 8.1 RU5
Software Portal platform detection introduced in ITMS 8.1 RU5The Software Portal provides users access to software that administrators grant rights to. This software can be selected and installed...
View Article