Incidents
XDR-4820LowResolvedBenign98%
PowerShell download cradle – IT admin script, benign
Affected: ENG-WS-009 · it.adminCortex XDRUpdated 05:55 PT · Owner AI SOC
AI summary
IEX download of an internal Intune remediation script from an approved repository. Matched change ticket CHG-2214.
Verdict
Benign98%
Customer-approved model · AWS GovCloud (us-gov-west-1) · inside Halcyon's account. Time to verdict 47s.