Aviad Meyer

Cortex XDR detects and prevents the way attackers get a Golden Ticket leveraging multiple data sources and behavioral detection.

Cortex XDR detects Active Directory Certificate Services abuse leveraging behavioral analytics.

Cortex XDR detects the Kerberos noPac vulnerabilities (CVE-2021-42278 and CVE-2021-42287) leveraging behavioral analytics.

Executive Summary A recent vulnerability, CVE-2020-17049 (dubbed Bronze Bit), has been disclosed by Microsoft. This vulnerability occurs in the way the Key Distribution Center (KDC) handles service tickets and validates if delegation …

Executive Summary The Cortex XDR Security Research Team recently observed “PowerShell without PowerShell” activity involving PowerShell commands and scripts that do not directly invoke the powershell.exe binary. PowerShell commands and scripts can …