%GoCortexIO Snippets

#T1218.011

1 snippet

2026-06-08 03:55 UTC Cortex XDR : Hunt for compromised system binaries attempting to fetch and execute untrusted, externally hosted dynamic link libraries via rundll32.

#detection #multi-tenant #xql #T1218.011