| _id |
62ea1d4d348d24c6a7972b82 |
| reference |
['https://www.virustotal.com/gui/file/d5d1138d64c34e29f092730aa3267a88b1cf105483a0ec42998474bdab1d212d/details'] |
| md5 |
[] |
| sha1 |
[] |
| sha256 |
['d5d1138d64c34e29f092730aa3267a88b1cf105483a0ec42998474bdab1d212d'] |
| mail |
[] |
| ip |
[] |
| domain |
[] |
| url |
[] |
| user |
atluxity |
| tweet |
@cortexbypanw @PaloAltoNtwks In Cortex XDR. when you alert on a script doing something. like adding a startup registry entry. why do you think I care about the hash of wscript.exe and not the script? And when this is the script. it can be considered OK. https://www.virustotal.com/gui/file/d5d1138d64c34e29f092730aa3267a88b1cf105483a0ec42998474bdab1d212d/details |
| id |
1554385380123840512 |
| retweets |
0 |
| link |
https://twitter.com/atluxity/status/1554385380123840512 |
| mentions |
['@cortexbypanw', '@PaloAltoNtwks'] |
| hashtags |
[] |
| date |
2022-08-02 08:35:28 |
| timestamp |
1659454528 |