Vault SOC
Incidents
XDR-4812MediumResolvedBenign87%

certutil downloading file on HP-ERP-01

Affected: HP-ERP-01Cortex XDRUpdated 21:20 PT · Owner AI SOC

AI summary

ERP vendor patch script; signed payload, matched maintenance window.

Verdict

Benign87%

Customer-approved model · AWS GovCloud (us-gov-west-1) · inside Halcyon's account. Time to verdict 47s.