mars and snare question

Unanswered Question
Aug 28th, 2007

have set up snare on a windows server for a customer and I can get reports indicating that the data is sent to the mars box, however, I don't know enough about this to determine what would trigger and incident on mars. Is there a way to make this happen?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
mhellman Tue, 08/28/2007 - 07:47

manually map a hidden admin share and use invalid credentials multiple times. That should generate an incident.



This Discussion