Jump to content

Matrix-Tiger

Members
  • Posts

    2
  • Joined

  • Last visited

Posts posted by Matrix-Tiger

  1. Hello there,

    I'm running Kali Linux in a VM and I want to add it's traffic to exclusions(Traffic from Kali VM Only). What's the best way to do it?

    This is the event details.

    Event: We found an application that can be used by intruders to damage your computer or personal data.
    User: NT AUTHORITY\SYSTEM
    User type: System user
    Application name: vmnat.exe
    Application path: C:\Windows\SysWOW64
    Component: Safe Browsing
    Result description: Detected
    Type: Software that may cause harm
    Name: HEUR:HackTool.Python.Impacket.gen
    Precision: Heuristic Analysis
    Threat level: Medium
    Object type: File
    Object name: dcomexec.py
    Object path: http://kali.cs.nycu.edu.tw/kali/pool/main/i/impacket/python3-impacket_0.11.0-2_all.deb//data.tar.xz//data.tar//./usr/share/doc/python3-impacket/examples
    MD5 of an object: 8FE1BDA637AF186BC0A95150FF16D264
    Reason: Expert analysis
    Databases release date: Today, 1/16/2024 1:52:00 AM

    I can add vmnat.exe to exclusions, but it would ignore the scan for the other VMs too. Is there any best way to do it(Such as adding specific network adapter to the exclusions)?

    Thank you.

     

×
×
  • Create New...