CIRCLE WITH A DOT

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

The Live Terminal feature of Cortex XDR can be abused by attackers as a pre-installed, EDR-trusted C2 channel

1 Posts 1 Posters 0 Views

R This user is from outside of this forum
R This user is from outside of this forum
r1cksec@infosec.exchange

wrote last edited by

#1

The Live Terminal feature of Cortex XDR can be abused by attackers as a pre-installed, EDR-trusted C2 channel

Abusing Cortex XDR Live Terminal as a C2 - InfoGuard Labs

The Cortex XDR agent includes an incident response feature called "Live Terminal", which attackers can abuse as a C2.

InfoGuard Labs (labs.infoguard.ch)

#infosec #cybersecurity #redteam #pentest
1 Reply Last reply
1
0
R relay@relay.infosec.exchange shared this topic

Log in to reply