?? 2177.txt
字號(hào):
Rule:--Sid:2177--Summary:This event is generated when an attempt is made to access a system folder via SMB. --Impact:Serious. This folder contains important operating system information.--Detailed Information:This event indicates that an attempt was made to access a folder containing important operating system files using SMB across the network.--Affected Systems:Microsoft Windows systems.--Attack Scenarios:If this folder is accessible via SMB the attacker can replace or view important operating system files.--Ease of Attack:Simple.--False Positives:None known.--False Negatives:None Known.--Corrective Action:Check the host for signs of system compromise.Turn off file and print sharing on the target host.Use a packet filtering firewall to disallow SMB access to the host from sources external to the protected network.--Contributors:Sourcefire Vulnerability Research TeamBrian Caswell <bmc@sourcefire.com>Nigel Houghton <nigel.houghton@sourcefire.com>--Additional References:--
?? 快捷鍵說(shuō)明
復(fù)制代碼
Ctrl + C
搜索代碼
Ctrl + F
全屏模式
F11
切換主題
Ctrl + Shift + D
顯示快捷鍵
?
增大字號(hào)
Ctrl + =
減小字號(hào)
Ctrl + -