Incidents
XDR-4799HighEscalated to Unit 42Needs Review74%
Anomalous RDP from HP-ERP-01 to HP-DC-02
Affected: HP-ERP-01, HP-DC-02Cortex XDRNGFWUpdated 19:30 PT · Owner Vault engineer
AI summary
Interactive RDP using a service account outside its baseline. Unit 42 engaged for scoping (6 hrs).
Verdict
Needs Review74%
Customer-approved model · AWS GovCloud (us-gov-west-1) · inside Halcyon's account. Time to verdict 47s.