The community is a place to collaborate, share insights and experiences, and get answers to questions.\r\nSearch here or look around to get started.", "imageupload.max_uploaded_images_per_upload" : 100, "imageupload.max_uploaded_images_per_user" : 1000, "integratedprofile.connect_mode" : "", "tkb.toc_maximum_heading_level" : "", "tkb.toc_heading_list_style" : "disc", "sharedprofile.show_hovercard_score" : true, "config.search_before_post_scope" : "community", "tkb.toc_heading_indent" : "", "p13n.cta.recommendations_feed_dismissal_timestamp" : -1, "imageupload.max_file_size" : 3072, "layout.show_batch_checkboxes" : false, "integratedprofile.cta_connect_slim_dismissal_timestamp" : -1 }, "isAnonymous" : true, "policies" : "image-upload.process-and-remove-exif-metadata" : false , "registered" : false, "emailRef" : "", "id" : -1, "login" : "Anonymous" }, "Server" : "communityPrefix" : "/tpykb84852", "nodeChangeTimeStamp" : 1675838841280, "tapestryPrefix" : "/t5", "deviceMode" : "DESKTOP", "responsiveDeviceMode" : "DESKTOP", "membershipChangeTimeStamp" : "0", "version" : "22.12", "branch" : "22.12-release", "showTextKeys" : false , "Config" : "phase" : "prod", "integratedprofile.cta.reprompt.delay" : 30, "profileplus.tracking" : "profileplus.tracking.enable" : false, "profileplus.tracking.click.enable" : false, "profileplus.tracking.impression.enable" : false , "app.revision" : "2302010131-s48b13a6fef-b73", "navigation.manager.community.structure.limit" : "1000" , "Activity" : "Results" : [ ] , "NodeContainer" : "viewHref" : " -p/forums", "description" : "", "id" : "forums", "shortTitle" : "Forums", "title" : "Forums", "nodeType" : "category" , "Page" : "skins" : [ "fortinet", "theme_hermes", "responsive_peak" ], "authUrls" : "loginUrl" : "/tpykb84852/auth/saml/doauth/post?referer=https%3A%2F%2Fcommunity.fortinet.com%2Ft5%2FCybersecurity-Forum%2FFortiEDR-best-practice-in-detecting-and-defending-Sunburst-UNC%2Fm-p%2F235443%2Fthread-id%2F1739", "loginUrlNotRegistered" : "/tpykb84852/auth/saml/doauth/post?redirectreason=notregistered&referer=https%3A%2F%2Fcommunity.fortinet.com%2Ft5%2FCybersecurity-Forum%2FFortiEDR-best-practice-in-detecting-and-defending-Sunburst-UNC%2Fm-p%2F235443%2Fthread-id%2F1739", "loginUrlNotRegisteredDestTpl" : "/tpykb84852/auth/saml/doauth/post?redirectreason=notregistered&referer=%7B%7BdestUrl%7D%7D" , "name" : "ForumTopicPage", "rtl" : false, "object" : "viewHref" : "/t5/Cybersecurity-Forum/FortiEDR-best-practice-in-detecting-and-defending-Sunburst-UNC/td-p/235443", "subject" : "FortiEDR best practice in detecting and defending Sunburst/UNC 2452", "id" : 235443, "page" : "ForumTopicPage", "type" : "Thread" , "WebTracking" : "Activities" : , "path" : "Community:Fortinet Community/Category:Forums/Board:Cybersecurity Forum/Message:FortiEDR best practice in detecting and defending Sunburst\\/UNC 2452" , "Feedback" : "targeted" : , "Seo" : "markerEscaping" : "pathElement" : "prefix" : "@", "match" : "^[0-9][0-9]$" , "enabled" : false , "TopLevelNode" : "viewHref" : " ", "description" : "The community is a place to collaborate, share insights and experiences, and get answers to questions.", "id" : "tpykb84852", "shortTitle" : "Fortinet Community", "title" : "Fortinet Community", "nodeType" : "Community" , "Community" : "viewHref" : " ", "integratedprofile.lang_code" : "en", "integratedprofile.country_code" : "US", "id" : "tpykb84852", "shortTitle" : "Fortinet Community", "title" : "Fortinet Community" , "CoreNode" : "conversationStyle" : "forum", "viewHref" : " -Forum/bd-p/techforum", "settings" : , "description" : "This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.", "id" : "techforum", "shortTitle" : "Cybersecurity Forum", "title" : "Cybersecurity Forum", "nodeType" : "Board", "ancestors" : [ "viewHref" : " -p/forums", "description" : "", "id" : "forums", "shortTitle" : "Forums", "title" : "Forums", "nodeType" : "category" , "viewHref" : " ", "description" : "The community is a place to collaborate, share insights and experiences, and get answers to questions.", "id" : "tpykb84852", "shortTitle" : "Fortinet Community", "title" : "Fortinet Community", "nodeType" : "Community" ] };LITHIUM.Components.RENDER_URL = '/t5/util/componentrenderpage/component-id/#component-id?render_behavior=raw';LITHIUM.Components.ORIGINAL_PAGE_NAME = 'forums/v5/ForumTopicPage';LITHIUM.Components.ORIGINAL_PAGE_ID = 'ForumTopicPage';LITHIUM.Components.ORIGINAL_PAGE_CONTEXT = 'kDlhCggTPksRzGOPlVGvvxF_RtZ6Rx-qIDaQ6LP6sTAFgIM81ZB29LddBxagZ7Tvq1qe4e9UMoT5BwdI2W6OcDl2g9afjpp0pM-dXq0TB_y8qqO7CvhjzWy0n4Daq3EG0eFwLZVTFsX4QjerxenWH0emQUbKOdHnGgOUGgTv6-uwaLpk7tE2lkqWaVcypctUZ6lJz9c7MocpfGmS24HkVBDdUmxhYo1L5b8xJOCnrWN-ZlnHM5x1uawqmGXV4o73M_wpL4C6U_yZwcF-HVCILwDp_pbjK5n9QK1hu5pWyS5gcrm7gukagGtZXwaz3sc4RmgbfIex1mcccmb5FwvAW0arQCzpXQpFH-bheH7hxKXTSbw637kPkaDgIucYHEXgtQCZdw4uOIoW8T644410gtJE3bzOWyqf-Mi2ryZdHak-Y2W6fUL6ZWIUbC6KFuhiAElPi-qrJK9MPqnbuiokHKmprtaqsk92AU--MTqufPsDF0wCITGavgy_IUo0wzzpAgL1z3Xho2rKJkk53jq91qEccvJ1LNIRrZixzvlunRmuOlMk5LgRdT4IpgePgBSV8293UiH3wb-vtbxsA5mdGpLWoucFBWEVwVZ_t7xzQVFm4kYUKXO5mq7om6P89ufLm6CZfjfRs0l-QTYdj_MQ1V9D9zwbGo3d_XQ7rX9pI2dvWe73g-9BWEkYGcKcBsn9hHfo05UC4oVi-JqYMNU9gB8EMD9r4Zv6k3mc8_7SoFEKXBHdKsRF28fO59YN4QlN1vCvum26ME-KJDPN2rPl7uNRdHp-YZGNq1LnMQhWomufinyHONP2LaJN87G9F4uENesdp4gzNUdu06n6aYdlc85eusEIirbYnxqaxM3gCwNJ1wSactiTWkxuoFcmId8w4nJ93xvjAm0LJIblI74JhWnLFKCZCwkU8pQDtu_XdorUNrU4BBfGRKGRkWWNu5yjqE7nU4_O7wt5ij7omoNYmA..';LITHIUM.Css = "BASE_DEFERRED_IMAGE" : "lia-deferred-image", "BASE_BUTTON" : "lia-button", "BASE_SPOILER_CONTAINER" : "lia-spoiler-container", "BASE_TABS_INACTIVE" : "lia-tabs-inactive", "BASE_TABS_ACTIVE" : "lia-tabs-active", "BASE_AJAX_REMOVE_HIGHLIGHT" : "lia-ajax-remove-highlight", "BASE_FEEDBACK_SCROLL_TO" : "lia-feedback-scroll-to", "BASE_FORM_FIELD_VALIDATING" : "lia-form-field-validating", "BASE_FORM_ERROR_TEXT" : "lia-form-error-text", "BASE_FEEDBACK_INLINE_ALERT" : "lia-panel-feedback-inline-alert", "BASE_BUTTON_OVERLAY" : "lia-button-overlay", "BASE_TABS_STANDARD" : "lia-tabs-standard", "BASE_AJAX_INDETERMINATE_LOADER_BAR" : "lia-ajax-indeterminate-loader-bar", "BASE_AJAX_SUCCESS_HIGHLIGHT" : "lia-ajax-success-highlight", "BASE_CONTENT" : "lia-content", "BASE_JS_HIDDEN" : "lia-js-hidden", "BASE_AJAX_LOADER_CONTENT_OVERLAY" : "lia-ajax-loader-content-overlay", "BASE_FORM_FIELD_SUCCESS" : "lia-form-field-success", "BASE_FORM_WARNING_TEXT" : "lia-form-warning-text", "BASE_FORM_FIELDSET_CONTENT_WRAPPER" : "lia-form-fieldset-content-wrapper", "BASE_AJAX_LOADER_OVERLAY_TYPE" : "lia-ajax-overlay-loader", "BASE_FORM_FIELD_ERROR" : "lia-form-field-error", "BASE_SPOILER_CONTENT" : "lia-spoiler-content", "BASE_FORM_SUBMITTING" : "lia-form-submitting", "BASE_EFFECT_HIGHLIGHT_START" : "lia-effect-highlight-start", "BASE_FORM_FIELD_ERROR_NO_FOCUS" : "lia-form-field-error-no-focus", "BASE_EFFECT_HIGHLIGHT_END" : "lia-effect-highlight-end", "BASE_SPOILER_LINK" : "lia-spoiler-link", "FACEBOOK_LOGOUT" : "lia-component-users-action-logout", "BASE_DISABLED" : "lia-link-disabled", "FACEBOOK_SWITCH_USER" : "lia-component-admin-action-switch-user", "BASE_FORM_FIELD_WARNING" : "lia-form-field-warning", "BASE_AJAX_LOADER_FEEDBACK" : "lia-ajax-loader-feedback", "BASE_AJAX_LOADER_OVERLAY" : "lia-ajax-loader-overlay", "BASE_LAZY_LOAD" : "lia-lazy-load";LITHIUM.noConflict = true;LITHIUM.useCheckOnline = false;LITHIUM.RenderedScripts = [ "jquery.hoverIntent-r6.js", "Text.js", "Placeholder.js", "ValueSurveyLauncher.js", "DropDownMenu.js", "jquery.js", "jquery.tmpl-1.1.1.js", "MessageBodyDisplay.js", "Lithium.js", "ForceLithiumJQuery.js", "Globals.js", "PolyfillsAll.js", "AjaxSupport.js", "jquery.clone-position-1.0.js", "jquery.effects.core.js", "DeferredImages.js", "ElementQueries.js", "json2.js", "jquery.json-2.6.0.js", "jquery.blockui.js", "Loader.js", "NoConflict.js", "Dialog.js", "ResizeSensor.js", "DynamicPager.js", "jquery.ui.widget.js", "jquery.ui.position.js", "jquery.iframe-shim-1.0.js", "jquery.ui.draggable.js", "DropDownMenuVisibilityHandler.js", "LiModernizr.js", "jquery.ui.dialog.js", "jquery.effects.slide.js", "prism.js", "Link.js", "jquery.ajax-cache-response-1.0.js", "AjaxFeedback.js", "jquery.ui.mouse.js", "jquery.fileupload.js", "Cache.js", "jquery.placeholder-2.0.7.js", "InformationBox.js", "InlineMessageEditor.js", "UserListActual.js", "LazyLoadComponent.js", "PartialRenderProxy.js", "jquery.delayToggle-1.0.js", "jquery.ui.core.js", "jquery.css-data-1.0.js", "Sandbox.js", "jquery.ui.resizable.js", "Forms.js", "Throttle.js", "addthis_widget.js", "Events.js", "jquery.function-utils-1.0.js", "jquery.scrollTo.js", "ActiveCast3.js", "jquery.viewport-1.0.js", "jquery.iframe-transport.js", "Auth.js", "ElementMethods.js", "SpoilerToggle.js", "InlineMessageReplyContainer.js", "InlineMessageReplyEditor.js", "CustomEvent.js", "EarlyEventCapture.js", "jquery.position-toggle-1.0.js", "Components.js", "ThreadedDetailMessageList.js", "Video.js", "Namespace.js", "jquery.lithium-selector-extensions.js", "jquery.appear-1.1.1.js", "DataHandler.js"];(function(){LITHIUM.AngularSupport=function(){function g(a,c);for(var b in c)"[object object]"===Object.prototype.toString.call(c[b])?a[b]=g(a[b],c[b]):a[b]=c[b];return avar d,f,b=coreModule:"li.community",coreModuleDeps:[],noConflict:!0,bootstrapElementSelector:".lia-page .min-width .lia-content",bootstrapApp:!0,debugEnabled:!1,useCsp:!0,useNg2:!1,k=function()var a;return function(b)();LITHIUM.Angular=;return{preventGlobals:LITHIUM.Globals.preventGlobals,restoreGlobals:LITHIUM.Globals.restoreGlobals,init:function(){var a=[],c=document.querySelector(b.bootstrapElementSelector);a.push(b.coreModule);b.customerModules&&0 Browse Fortinet Community HelpSign In Forums Support Forum Cybersecurity Forum Knowledge Base Customer Service FortiGate FortiClient FortiAP FortiAnalyzer FortiADC FortiAuthenticator FortiBridge FortiCache FortiCarrier FortiCASB FortiConnect FortiConverter FortiCNP FortiDAST FortiDDoS FortiDB FortiDNS FortiDeceptor FortiDevSec FortiDirector FortiEDR FortiExtender FortiGate Cloud FortiGuard FortiHypervisor FortiInsight FortiMail FortiManager FortiMonitor FortiNAC FortiNDR FortiPortal FortiProxy FortiRecon FortiRecorder FortiSandbox FortiScan FortiSIEM FortiSOAR FortiSwitch FortiTester FortiToken FortiVoice FortiWAN FortiWeb Wireless Controller RMA Information and Announcements FortiCloud Products ZTNA Community Groups Local Groups Agora Higher Education Carolinas Higher Education Florida K12 Carolinas K12 Florida Fortinet Xperts LATAM & Caribbean Global Groups FortiSIEM FortiSOAR Fortinet Training Institute Fortinet Certified Trainers Fortinet Security Academy Veterans Employment Resource Group WiCyS NSE 4 Certification Summer Camp Blogs #lia-body .lia-quilt-row-header-hero background: linear-gradient(rgba(0, 0, 0, 0.4), rgba(0, 0, 0, 0.4)), url("/html/assets/homepage-banner-bg.png") no-repeat center / cover; Cybersecurity Forum This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.
Solarwinds Log %26 Event Manager
2ff7e9595c
Comments