Versions Compared

Old Version 6

changes.mady.by.user Mirza Muzammil Baig

Saved on

compared with

New Version Current

changes.mady.by.user Svetlana Sheptiy

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Info

FAM and RAM functionality is available starting from Snare Agent for Windows v5.6.0


There needs to be performed following three steps, before Snare can capture the FAM / RAM events.

1. Enable FAM / RAM Events in Windows Security Policy

Info

This step is done automatically in Snare Agents v5.7.1 or newer, assuming the following setting in General Configuration is checked: 
Image Added

Open the Windows Security Policy (from Contrrol Panel / Administrative Tools on local machine or via GPO on Domain Control) and enable the following settings:

...