Fred Frey
Fred Frey
Yes ^^^ I actually was just coming here to raise the same issue and curious how to solve. I was running very basic Recon like so ... `c:\windows\system32\net.exe" group "domain...
another somewhat different issue is rules that match commandline but arguments can be position independent ie: `test.exe -f attack -z now` vs `test.exe -z now -f attack` ... can open...
+1 for this feature (surprised it didn't exist) ... would like to sync logs from a jump host to S3 then clean jump host up once I know they are...
playing around with it now ... simple things not working (like removing sed) ... if anyone has ability to sniff a 'normal' Alexa packet with this sound I'd be up...
Yes, verified (via nmap) port 8089 is open. Just tried it again and getting this error from my Laptop (remote machine). Note when i do this from the Splunk server...
Initial [Slack conversation over here](https://splunk-usergroups.slack.com/archives/CDNHXVBGS/p1649691877572239) One idea to start the conversation is to split the current ``replay.yml`` into two parts ... 1. ``config.yml`` which contains the Splunk params (host/user/pass) +...
Sounds great, lets do this!
FWIW I pulled this PR into my venv and was able to connect to my self-signed MCP server - thx, looking forward to the merge into main