Case Details

Sunday, August 4, 2019 12:00 AM to Monday, August 5, 2019 12:00 AM SAPST (UTC-05:00)

Report prepared as part of Puntos - Daily Reporting for Unisys Global EMEA - SI - #2 on 8/4/2019 11:00 PM SAPST (UTC-05:00)

Copyright © 2019 LogRhythm, Inc. All Rights Reserved.

Case Details

Cases open between Sunday, August 4, 2019 12:00 AM to Monday, August 5, 2019 12:00 AM SAPST (UTC-05:00)

Case 2 : LogRhythm Agent Heartbeat Missed

Case Priority : 4

Due Date : 09/25/2018

Owner : Pandya, Gaurang

Case Tags :

Date Updated : 09/18/2018 01:39AM

Last Updated By : Pandya, Gaurang

Created 09/18/2018 01:38 AM

Notes :

Case 3 : LR HB MIss

Case Priority : 4

Due Date : 09/25/2018

Owner : Pandya, Gaurang

Case Tags :

Date Updated : 09/18/2018 01:41AM

Last Updated By : Pandya, Gaurang

Created 09/18/2018 01:40 AM

Notes :

Case 4 : AIE: Ryder:- User Logon

Case Priority : 5

Due Date : 03/15/2019

Owner : LogRhythm Administrator

Report prepared as part of Puntos - Daily Reporting for Unisys Global EMEA - SI - #2 on 8/4/2019 11:00 PM SAPST (UTC-05:00)
Copyright © 2019 LogRhythm, Inc. All Rights Reserved.
Case Details

Cases open between Sunday, August 4, 2019 12:00 AM to Monday, August 5, 2019 12:00 AM SAPST (UTC-05:00)

Case Tags :

Date Updated : 07/22/2019 07:20AM

Last Updated By : LogRhythm Administrator

Created 03/14/2019 10:40 AM

Notes :
Date User Name Note Content
07/22/2019 07:20 AM LogRhythm Administrator Smart Response Output

SmartResponse Action: Create Config file

Run Time: 3289 ms
Status: Completed successfully
Output Results: Validations Passed.
Configuration Parameters saved for Case Mgt. SRP
07/22/2019 07:20 AM LogRhythm Administrator Smart Response Output

SmartResponse Action: Create Config file

Run Time: 3289 ms
Status: Completed successfully
Output Results: Validations Passed.
Configuration Parameters saved for Case Mgt. SRP
07/22/2019 07:20 AM LogRhythm Administrator Smart Response Output

SmartResponse Action: Create Config file

Run Time: 3289 ms
Status: Completed successfully
Output Results: Validations Passed.
Configuration Parameters saved for Case Mgt. SRP

Case 184 : AIE: Unisys MSS: Tor Exit Node

Case Priority : 3

Due Date : 07/21/2019

Owner : S, Sankar
Case Tags :

Report prepared as part of Puntos - Daily Reporting for Unisys Global EMEA - SI - #2 on 8/4/2019 11:00 PM SAPST (UTC-05:00)
Copyright © 2019 LogRhythm, Inc. All Rights Reserved.
Case Details

Cases open between Sunday, August 4, 2019 12:00 AM to Monday, August 5, 2019 12:00 AM SAPST (UTC-05:00)

Date Updated : 07/20/2019 06:31AM

Last Updated By : S, Sankar

Created 07/20/2019 06:31 AM

Notes :

Case 253 : AIE: Testing : Ryder: CCF: Config Modified (Auto Case) (microsoft office 64-bit components 2013)

Case Priority : 3

Due Date : 07/27/2019

Owner : CASE, API

Case Tags : SRP-Case

Date Updated : 07/26/2019 10:38AM

Last Updated By : Marimuthu, Vineeth Kumar

Created 07/26/2019 08:09 AM

Notes :
Date User Name Note Content
07/26/2019 08:09 AM CASE, API [SRP-Case] Created Case (Fields microsoft office
64-bit components 2013)
07/26/2019 08:11 AM CASE, API [SRP-Case] Added Alarm 514651 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 08:14 AM CASE, API [SRP-Case] Added Alarm 514653 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 08:23 AM CASE, API [SRP-Case] Added Alarm 514656 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 08:33 AM CASE, API [SRP-Case] Added Alarm 514659 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 08:52 AM CASE, API [SRP-Case] Added Alarm 514682 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 09:05 AM CASE, API [SRP-Case] Added Alarm 514683 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 09:06 AM CASE, API [SRP-Case] Added Alarm 514685 Case (Fields
microsoft office 64-bit components 2013)

Report prepared as part of Puntos - Daily Reporting for Unisys Global EMEA - SI - #2 on 8/4/2019 11:00 PM SAPST (UTC-05:00)
Copyright © 2019 LogRhythm, Inc. All Rights Reserved.
Case Details

Cases open between Sunday, August 4, 2019 12:00 AM to Monday, August 5, 2019 12:00 AM SAPST (UTC-05:00)

07/26/2019 09:15 AM CASE, API [SRP-Case] Added Alarm 514688 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 09:24 AM CASE, API [SRP-Case] Added Alarm 514691 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 09:34 AM CASE, API [SRP-Case] Added Alarm 514698 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 09:47 AM CASE, API [SRP-Case] Added Alarm 514700 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 09:51 AM CASE, API [SRP-Case] Added Alarm 514702 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 09:52 AM CASE, API [SRP-Case] Added Alarm 514704 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 10:03 AM CASE, API [SRP-Case] Added Alarm 514706 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 10:09 AM CASE, API [SRP-Case] Added Alarm 514710 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 10:10 AM CASE, API [SRP-Case] Added Alarm 514711 Case (Fields
microsoft office 64-bit components 2013)
07/26/2019 10:38 AM CASE, API [SRP-Case] Added Alarm 514716 Case (Fields
microsoft office 64-bit components 2013)

Case 254 : AIE: Testing : Ryder: CCF: Config Modified (Auto Case) (NSClient++ (x64))

Case Priority : 3

Due Date : 07/27/2019

Owner : CASE, API

Case Tags : SRP-Case

Date Updated : 07/26/2019 09:07AM

Last Updated By : CASE, API

Created 07/26/2019 09:07 AM

Notes :
Date User Name Note Content
07/26/2019 09:07 AM CASE, API [SRP-Case] Created Case (Fields NSClient++ (x64))

Report prepared as part of Puntos - Daily Reporting for Unisys Global EMEA - SI - #2 on 8/4/2019 11:00 PM SAPST (UTC-05:00)
Copyright © 2019 LogRhythm, Inc. All Rights Reserved.
Case Details

Cases open between Sunday, August 4, 2019 12:00 AM to Monday, August 5, 2019 12:00 AM SAPST (UTC-05:00)

Case 275 : AIE: Unisy MSS: C2:Ryder: External DNS Server Used

Case Priority : 3

Due Date : 07/30/2019

Owner : A, Farooq Babu

Case Tags :

Date Updated : 07/29/2019 10:16AM

Last Updated By : A, Farooq Babu

Created 07/29/2019 10:16 AM

Notes :

Case 309 : AIE: PUNTOS Darktrace: Critical Events

Case Priority : 2

Due Date : 08/02/2019

Owner : S, Sankar
Case Tags :

Date Updated : 08/01/2019 09:35AM

Last Updated By : S, Sankar

Created 08/01/2019 09:35 AM

Notes :

Case 329 : AIE: Unisys MSS: Tor Exit Node

Case Priority : 3

Due Date : 08/04/2019

Owner : Vergara Rincon, Wilson Harbey

Report prepared as part of Puntos - Daily Reporting for Unisys Global EMEA - SI - #2 on 8/4/2019 11:00 PM SAPST (UTC-05:00)
Copyright © 2019 LogRhythm, Inc. All Rights Reserved.
Case Details

Cases open between Sunday, August 4, 2019 12:00 AM to Monday, August 5, 2019 12:00 AM SAPST (UTC-05:00)

Case Tags :

Date Updated : 08/04/2019 12:27 PM

Last Updated By : Vergara Rincon, Wilson Harbey

Created 08/03/2019 10:38 PM --> Closed 08/04/2019 12:27 PM

Notes :

Case 330 : AIE: Unisys MSS: Recon: External Port Scan

Case Priority : 4

Due Date : 08/05/2019

Owner : Vergara Rincon, Wilson Harbey

Case Tags :

Date Updated : 08/04/2019 12:26 PM

Last Updated By : Vergara Rincon, Wilson Harbey

Created 08/04/2019 11:07 AM --> Closed 08/04/2019 12:26 PM

Notes :
Date User Name Note Content
08/04/2019 11:09 AM Nayak Y, Rahul TCP allowed traffic from external IP "77.247.110.37"
towards multiple internal IP's and action is dropped.

External IP Reputation and details :

https://www.abuseipdb.com/check/77.247.110.37

Case 331 : AIE: Unisys MSS: Recon: External Port Scan

Case Priority : 4

Due Date : 08/05/2019

Owner : Vergara Rincon, Wilson Harbey

Case Tags :

Report prepared as part of Puntos - Daily Reporting for Unisys Global EMEA - SI - #2 on 8/4/2019 11:00 PM SAPST (UTC-05:00)
Copyright © 2019 LogRhythm, Inc. All Rights Reserved.
Case Details

Cases open between Sunday, August 4, 2019 12:00 AM to Monday, August 5, 2019 12:00 AM SAPST (UTC-05:00)

Date Updated : 08/04/2019 12:27 PM

Last Updated By : Vergara Rincon, Wilson Harbey

Created 08/04/2019 12:11 PM --> Closed 08/04/2019 12:27 PM

Notes :
Date User Name Note Content
08/04/2019 12:13 PM Nayak Y, Rahul TCP allowed traffic from external IP
"45.227.255.202" towards internal IP's and action is
dropped.

External IP reputation and details :

https://www.abuseipdb.com/check/45.227.255.202

Case 332 : AIE: Unisys MSS: Tor Exit Node

Case Priority : 3

Due Date : 08/05/2019

Owner : Vergara Rincon, Wilson Harbey

Case Tags :

Date Updated : 08/04/2019 12:27 PM

Last Updated By : Vergara Rincon, Wilson Harbey

Created 08/04/2019 12:15 PM --> Closed 08/04/2019 12:27 PM

Notes :

Case 333 : AIE: Unisy MSS: C2:- PUNTOS- External DNS Server Used

Case Priority : 3

Due Date : 08/05/2019

Owner : Vergara Rincon, Wilson Harbey

Case Tags :

Report prepared as part of Puntos - Daily Reporting for Unisys Global EMEA - SI - #2 on 8/4/2019 11:00 PM SAPST (UTC-05:00)
Copyright © 2019 LogRhythm, Inc. All Rights Reserved.
Case Details

Cases open between Sunday, August 4, 2019 12:00 AM to Monday, August 5, 2019 12:00 AM SAPST (UTC-05:00)

Date Updated : 08/04/2019 02:34 PM

Last Updated By : Vergara Rincon, Wilson Harbey

Created 08/04/2019 01:07 PM --> Closed 08/04/2019 02:34 PM

Notes :
Date User Name Note Content
08/04/2019 01:10 PM Nayak Y, Rahul Host (origin) : 172.31.18.77
Host (Impacted) : 199.71.0.63

TCP allowed traffic from internal IP "172.31.18.77"

towards external IP "199.71.0.63" and action as
accept.

External IP reputation and details :

https://www.abuseipdb.com/check/199.71.0.63

Case 334 : AIE: PUNTOS Darktrace: Critical Events

Case Priority : 2

Due Date : 08/05/2019

Owner : Vergara Rincon, Wilson Harbey

Case Tags :

Date Updated : 08/04/2019 02:37 PM

Last Updated By : Vergara Rincon, Wilson Harbey

Created 08/04/2019 01:11 PM --> Closed 08/04/2019 02:37 PM

Notes :

Case 335 : AIE: Unisys MSS: Tor Exit Node

Case Priority : 3

Due Date : 08/05/2019

Owner : Vergara Rincon, Wilson Harbey

Case Tags :

Report prepared as part of Puntos - Daily Reporting for Unisys Global EMEA - SI - #2 on 8/4/2019 11:00 PM SAPST (UTC-05:00)
Copyright © 2019 LogRhythm, Inc. All Rights Reserved.
Case Details

Cases open between Sunday, August 4, 2019 12:00 AM to Monday, August 5, 2019 12:00 AM SAPST (UTC-05:00)

Date Updated : 08/04/2019 04:13 PM

Last Updated By : Vergara Rincon, Wilson Harbey

Created 08/04/2019 03:45 PM --> Closed 08/04/2019 04:13 PM

Notes :

Case 336 : AIE: Unisys MSS: Tor Exit Node

Case Priority : 3

Due Date : 08/05/2019

Owner : Vergara Rincon, Wilson Harbey

Case Tags :

Date Updated : 08/04/2019 04:28 PM

Last Updated By : Vergara Rincon, Wilson Harbey

Created 08/04/2019 03:48 PM --> Closed 08/04/2019 04:28 PM

Notes :
Date User Name Note Content
08/04/2019 03:51 PM Nayak Y, Rahul TCP traffic from Multiple external IP's towards
internal IP's " 172.31.19.11" " 172.31.19.12" and "
172.31.21.10".

Report prepared as part of Puntos - Daily Reporting for Unisys Global EMEA - SI - #2 on 8/4/2019 11:00 PM SAPST (UTC-05:00)
Copyright © 2019 LogRhythm, Inc. All Rights Reserved.