AD Explorer Creates a Directory Snapshot
Detects AD Explorer running with the snapshot option and writing result.dat into a temporary directory. This activity is often associated with reconnaissance and credential dumping in Active Directory environments.
Cortex XDR
