none
ARN file exported from another computer - cannot see user profiles RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    We use an incident response tool to remotely connect to another computer and generate an ARN file (running as SYSTEM).

    When we pull the ARN file back to the security analyst's workstation (not the PC where the ARN was generated),  the Users pull-down shows the profiles from the analyst workstation,  not the source PC.

    Is there a way to manually tell autorun which user profile to display (or have it enumerate the users from the ARN file, not the local PC)?

    Monday, July 20, 2020 1:52 PM
    |

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    I don't know if you can automate this, but from the user interface, if you select the profile you are interested in and save it, you will see this on another computer.

    So you can select one profile after the other and for each save a different arn file..

    HTH
    -mario

    Wednesday, July 22, 2020 7:00 AM
    |