Windows Defender Detection
Discovered while doing Adversary Emulation that Windows Defender will sometimes detect files/activity that Cortex fails to detect. In order to be alerted on these detections Cortex requires a custom correlation rule to be created and this is that.
Cortex XDR

