topic Got Metasploit? in General Topics

Got Metasploit?

Dan_Roddy — Thu, 08 Aug 2019 21:19:34 GMT

If IPS detects a metasploit component inside your network, if you're like me, this gets real and immediate attention. However, if you are backing up a machine with a Checkpoint console installed, IPS will trigger on this file inside the Smart Console directory:

COMMGR_Metasploit_help.

Take a deep breath, all is well.

Best regards,

Dan

Re: Got Metasploit?

PhoneBoy — Thu, 08 Aug 2019 23:15:36 GMT

Was it on a file transfer of a backup or something?
That sounds like a false positive we should look at.

Re: Got Metasploit?

Dan_Roddy — Wed, 14 Aug 2019 19:23:02 GMT

It was detected twice, first as a backup crossed a network segment and second as the backup file was transferred to a DR site.