cURL MSI Download and Execution
Detects the execution of cURL commands chained with msiexec to download and silently install an MSI package, a known tactic used by UNC3753 to deploy RMM tools like SuperOps.
Cortex XDR

Detects the execution of cURL commands chained with msiexec to download and silently install an MSI package, a known tactic used by UNC3753 to deploy RMM tools like SuperOps.

Already have an account?