#T1218.007

• 2026-06-12 03:52 UTC Cortex XDR : Analyse how threat actors abuse the trusted system installer to pull down external payloads, and hunt on this common initial access vector.
  #alerts#detection#multi-tenant#xql#T1218.007