AnyDesk Termination Followed by Timed Reboot (GodDamn/Hyadina Persistence Setup)
Detects a specific sequence of commands involving the termination of the AnyDesk process using taskkill, a short delay via the timeout command, and an immediate system reboot. This sequence is often associated with persistence setup or system preparation by threat actors.
Cortex XDR
