Skip to content
%
GoCortexIO Snippets
home
latest
about
rss
#T1219
1 snippet
2026-08-20 00:46 UTC
Cortex XDR
:
Hunt for unauthorised deployments of legitimate, signed Remote Monitoring and Management tools being abused for hands-on-keyboard adversary activity.
#alerts
#detection
#multi-tenant
#xql
#T1219