Thanks Dori, how to get the ID in case of SUB=MSTR?
ITschak On Sun, Sep 16, 2018 at 4:41 PM Dori Polotsky <[email protected]> wrote: > ITschak, > > For an address space that is not SUB=MSTR, you can examine ASCB -> ASSB -> > JSAB -> JSABUSID > I believe all three control blocks should be SP 245 (common). > > Good luck, > Dori > > On Sun, Sep 16, 2018 at 4:29 PM, ITschak Mugzach <[email protected]> > wrote: > > > Binyamin, > > > > What surprised me what that all ASXBs has the same address... So, how > can > > I get the userid associated with the ASCB? > > > > ITschak > > > > On Sun, Sep 16, 2018 at 4:17 PM Binyamin Dissen < > > [email protected]> > > wrote: > > > > > Because the ASXB is in private. You need to use the target memorie's > > ASID. > > > > > > On Sun, 16 Sep 2018 15:46:32 +0300 ITschak Mugzach <[email protected] > > > > > wrote: > > > > > > :>Few days ago someone (can't recall the thread) asked about scanning ( > > > ascb > > > :>chain. I tried to follow ascb ASXB and found that it always point to > > my > > > :>aSXB, even when I take the offset from the chain. Any idea why? and > > > :>alternatively, how can I find the userid the ascb is associated with? > > > > > > -- > > > Binyamin Dissen <[email protected]> > > > http://www.dissensoftware.com > > > > > > Director, Dissen Software, Bar & Grill - Israel > > > > > > > > > Should you use the mailblocks package and expect a response from me, > > > you should preauthorize the dissensoftware.com domain. > > > > > > I very rarely bother responding to challenge/response systems, > > > especially those from irresponsible companies. > > > > > > ---------------------------------------------------------------------- > > > For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to [email protected] with the message: INFO IBM-MAIN > > > > > > > > > -- > > ITschak Mugzach > > *|** IronSphere Platform* *|* *Information Security Contiguous Monitoring > > for Legacy **| * > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to [email protected] with the message: INFO IBM-MAIN > > > > > > -- > [image: Model9] > Dori Polotsky > R&D > m: +972-54-4584663 e: [email protected] w: www.model9.io > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > -- ITschak Mugzach *|** IronSphere Platform* *|* *Information Security Contiguous Monitoring for Legacy **| * ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
