3 ms·
Does anyone know how to check for malecious activity on exchange 2010? All the logs/tools explained in the articles do not exist befor exchange 2013
by thepill 6y ago
Does anyone know how to check for malecious activity on exchange 2010? All the logs/tools explained in the articles do not exist befor exchange 2013
- EvanAnderson 6y agoWith the caveat of "You know you shouldn't be running that anymore": Look for unauthenticated POST requests to "/ECP" URLs as a starting place. I haven't dug into 2010 (because I tried really hard to get rid of it in the run-up to end-of-support), and since there's no PoC available I can't try exploit code against one to see.
- throwaway366tt 6y agoIf you have a Microsoft rep, hit them up for a patch, once you’ve switched off OWA. Exchange 2010 is out of support, but not super super out of support.
- WarOnPrivacy 6y agoHere's the patch: https://www.microsoft.com/en-us/download/details.aspx?id=102774 https://www.microsoft.com/en-us/download/details.aspx?id=102... Description: https://support.microsoft.com/en-us/topic/description-of-the-security-update-for-microsoft-exchange-server-2010-service-pack-3-march-2-2021-kb5000978-894f27bf-281e-44f8-b9ba-dad705534459 https://support.microsoft.com/en-us/topic/description-of-the...