Globalscape Detect

| Method | Artifacts / Indicators | |--------|------------------------| | | Ports 1100 (admin), 21 , 990 , 443 , 8443 (Web Transfer Module), custom EFT ports. | | Service Detection | Service names: EFTServer , EFTScheduler , GlobalSCAPE EFT Service . | | Process/File System | eftengine.exe , eftadmin.exe , eftagent.exe . Install paths: C:\Program Files\GlobalSCAPE\EFT\ . | | Registry (Windows) | HKLM\SOFTWARE\GlobalSCAPE Inc.\EFT , HKLM\SOFTWARE\WOW6432Node\GlobalSCAPE Inc.\EFT . | | HTTP Banners | Server: GlobalSCAPE EFT or X-Powered-By: EFT . Login page title: “GlobalSCAPE EFT Web Transfer”. |

Globalscape supports multiple methods for forwarding logs: globalscape detect