CL-STA-1062 XDRAgent.exe Reverse Tunnel to 45.76.210.43:41256
Detects the execution of the XDRAgent process with command-line arguments indicative of a reverse shell connection to a specific remote IP address and port.
SentinelOne
Detects the execution of the XDRAgent process with command-line arguments indicative of a reverse shell connection to a specific remote IP address and port.
Already have an account?