Incidents
XDR-4821CriticalAwaiting approvalTrue Positive94%CUI enclave
Suspected Cobalt Strike beacon on ENG-WS-114 (CUI enclave)
Affected: host ENG-WS-114 · user j.reyesCortex XDRNGFWDefender for Office 365Updated 07:24 PT · Owner Vault engineer
T1566.001Spearphishing attachmentT1059.001PowerShellT1055Process injectionT1071.001Web protocols
Investigation steps
- AI analyst working…