Data Center Security

 View Only
  • 1.  NTFS Extended Attribute $KERNEL.PURGE.CSEACACHE change

    Posted May 09, 2023 08:01 AM

    Hello Team,

    There are some File modified events about the "NTFS Extended Attribute $KERNEL.PURGE.CSEACACHE change" in DCS 6.9.0 version

    Kindly someone help us learn what is "CSEACACHE"? Is this a safe program?

    And can it be excluded for specific messages(CSEACACHE) from file monitoring.

    • Screenshot of the error: 



      Regards,
      Sachin


  • 2.  RE: NTFS Extended Attribute $KERNEL.PURGE.CSEACACHE change

    Posted May 11, 2023 02:14 AM

    Hello Team,

    Kindly anyone assist on the requested query.

    Attached the screenshot as it is broken in previous email.

    LgvMhO0TgWb7chVLOskO_1683108425194__inline-____image001.jpg@01D97DE9.835666F0__image001-L.jpeg" class="media-object tinymce-editor-img img-responsive" title="error screenshot" data-title="error screenshot" width="400" data-modalsrc="https://higherlogicdownload.s3.amazonaws.com/BROADCOM/UploadedImages/LgvMhO0TgWb7chVLOskO_1683108425194__inline-____image001.jpeg@01D97DE9.835666F0__image001.jpeg" data-imgbase="https://higherlogicdownload.s3.amazonaws.com/BROADCOM/UploadedImages/LgvMhO0TgWb7chVLOskO_1683108425194__inline-____image001.jpeg@01D97DE9.835666F0__image001.jpeg" data-imgthumbnail="https://higherlogicdownload.s3.amazonaws.com/BROADCOM/UploadedImages/LgvMhO0TgWb7chVLOskO_1683108425194__inline-____image001.jpg@01D97DE9.835666F0__image001-T.jpeg" data-imgmedium="https://higherlogicdownload.s3.amazonaws.com/BROADCOM/UploadedImages/LgvMhO0TgWb7chVLOskO_1683108425194__inline-____image001.jpg@01D97DE9.835666F0__image001-M.jpeg" data-imglarge="https://higherlogicdownload.s3.amazonaws.com/BROADCOM/UploadedImages/LgvMhO0TgWb7chVLOskO_1683108425194__inline-____image001.jpg@01D97DE9.835666F0__image001-L.jpeg">




    Regards,
    Sachin




  • 3.  RE: NTFS Extended Attribute $KERNEL.PURGE.CSEACACHE change

    Broadcom Employee
    Posted May 12, 2023 08:56 AM

    Sachin, 
    None of your images are getting loaded. please provide some more details here. Please add OS version and if you can please also copy event in CSV format.