! Smokey Comments - Cyber Info

Get-WinEvent -FilterHashtable @{LogName='Security'; ID=4688} | Where-Object {$_.Message -like "*cynetEPS.exe*"} | Select-Object TimeCreated, Message -First 10

Get-WinEvent -FilterHashtable @{LogName='Security'; ID=4688} | Where-Object {$_.Message -like "*cynetEPS.exe*"} | Select-Object TimeCreated, Message -First 10

( I am not sure about the ID but I think that might be the correct one! )

13 replies

CICyber Info

•Created by kanra on 4/21/2025 in #❓︱support-requests

Cybersec/SecOps

or in powershell:

Get-ChildItem -Path C:\ -Filter cynetEPS.exe -Recurse -ErrorAction SilentlyContinue | Select-Object FullName

Get-ChildItem -Path C:\ -Filter cynetEPS.exe -Recurse -ErrorAction SilentlyContinue | Select-Object FullName

13 replies

CICyber Info

•Created by kanra on 4/21/2025 in #❓︱support-requests

Cybersec/SecOps

The location of Cynet could help you identify if the issue is actually a problem or not:

where /r C:\ cynetEPS.exe

where /r C:\ cynetEPS.exe

13 replies

CICyber Info

•Created by TheMk1Pro on 4/21/2025 in #❓︱support-requests

Bot Development

if you mean that, I hope I understood correctly!

50 replies

CICyber Info

•Created by TheMk1Pro on 4/21/2025 in #❓︱support-requests

Bot Development

the flag to add to the command file is ephemeral: true

50 replies