bigmacd
bigmacd @bigmacd16684 ·
Replying to @bigmacd16684
Monitor loading of `wpnapps.dll` or `msxml6.dll` via Sysmon ID 7 & ETW PushNotifications-Platform IDs 2416, 2418, 3052, 3153. Enforce group policy to disable toast notifications on endpoints. #Sysmon #ETW #CyberSecurity
1
1