Unsolved
This post is more than 5 years old
1 Message
0
3091
Unusual authentication activity with full_dsc_6875_668_64_02.exe
Howdy,
was wondering if anyone is aware of why the most recent Support Assist for PC's (6875_668_64_02) might be trying to authenticate with all local domain controllers?
We've had the previous version installed on clients for sometime, the only two units with the new version keep unsuccessfully trying to logon to AD, and weirdly poll each DC in turn. My SEIM keeps identifying the activity as potential Brute-force attack
Any clues?
Kusuma RenukaPrasad
3 Apprentice
3 Apprentice
•
23 Posts
0
November 17th, 2017 04:00
Hi Howdy,
Thanks for posting the question here. I will get in touch with the product team and let you know an update.
Thanks
Kusuma.
Kusuma RenukaPrasad
3 Apprentice
3 Apprentice
•
23 Posts
0
December 15th, 2017 06:00
HI Howdy,
Could you please let me know the link from where you downloaded the exe to install SupportAssist. And the SupportAssist you have installed is for single user or to manage multiple systems ?
This is the link for the latest release of SupportAssist
www.dell.com/.../support-center
Thanks
Kusuma.