An application was detected, orginating from your system. Please contact the system administrator.

Written by paris on May 7, 2019. Posted in Research

This is because something has triggered IPS

A quick fix to temp disable

Changed from quarantine to block

Then in quarantine monitor, remove the local 192.168 IP’s

Investigate the blocks in the below to what triggered it

Rating: 0.0/10 (0 votes cast)

Rating: 0 (from 0 votes)

Trackback from your site.

Paris Wells .exe on the end doesn't do anything , send the log file in the contact form https://pariswells.com/blog/contact
Copy file to workstations with Windows Intune · July 4, 2020
Kike Aramburu i ran the msiexec with the log option. Is there a way that I could get it to you? It is a very long one. Also, just for testing, I decided to run the a different command at the beginning,...
Copy file to workstations with Windows Intune · June 29, 2020
Paris Wells Thats what is says on their site : https://docs.pulsesecure.net/WebHelp/PDC/9.0R1/Content/PDC_AdminGuide_9.0R1/Installing_the_Pulse_Client.htm If running the .bat file manually installs it with the...
Copy file to workstations with Windows Intune · June 28, 2020
Kike Aramburu thanks for your reply. I decided to re-create the intune app completely, and now the files are copied. 🙂 Pulse installs, but the config file is not loaded. Do I have something wrong on the msi...
Copy file to workstations with Windows Intune · June 27, 2020
Paris Wells So lets say your source folder is C:\Software\PulseSecureClient , in here exists ( in the root of this folder ) PulseSecureClient\ps-pulse-win-9.1r5.0-b2101-64bitinstaller.msi with the .bat files...
Copy file to workstations with Windows Intune · June 26, 2020