Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

WannaCry Alert

$
0
0

Has anyone created a WannaCry LEM alert. This threat might have subsided due to the Kill switch but I am thinking others are coming.

 

Based on a few blog posts I have read I created a rule that looks on our file server for the below files.

@Please_Read_Me@.txt

testonly.wnry

.wcry

.wncry

.wncryt

 

This is what I have so far, but I was interested in others feedback.

 

2017-05-15_10-57-52.jpg


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>