Abusing Cortex XDR Live Terminal as a C2
Abusing Cortex XDR Live Terminal as a C2
labs.infoguard.ch
Abusing Cortex XDR Live Terminal as a C2 - InfoGuard Labs
The Cortex XDR agent includes an incident response feature called "Live Terminal", which attackers can abuse as a C2.
