Avatar

Aaron Cooper

  • Total activity 6
  • Last activity
  • Member since
  • Following 0 users
  • Followed by 0 users
  • Votes 0
  • Subscriptions 3

Activity overview

Latest activity by Aaron Cooper
  • Avatar

    Aaron Cooper commented,

    How are you pulling logs from Defender?  Did you create your own script, and if so, how did you do it?

  • Avatar

    Aaron Cooper commented,

    I'm doing this research right now.  From what I gather (and it's not documented in MS at all) is that this is a attempt to access a sharepoint site using a non-company username / password.  The log...

  • Avatar

    Aaron Cooper commented,

    *Bump*.  I have the same issue for a session ID.  Perhaps there is a way to merge the messages based on session ID, and parse the messages out from those merge?