_id 62ea1d4d348d24c6a7972b82
reference ['']
md5 []
sha1 []
sha256 ['d5d1138d64c34e29f092730aa3267a88b1cf105483a0ec42998474bdab1d212d']
mail []
ip []
domain []
url []
user atluxity
tweet @cortexbypanw @PaloAltoNtwks In Cortex XDR. when you alert on a script doing something. like adding a startup registry entry. why do you think I care about the hash of wscript.exe and not the script? And when this is the script. it can be considered OK.
id 1554385380123840512
retweets 0
mentions ['@cortexbypanw', '@PaloAltoNtwks']
hashtags []
date 2022-08-02 08:35:28
timestamp 1659454528