Skip to content
Threat Feed

Product

Crowdstrike Dashboard

1 brief RSS
high advisory

Crowdstrike RTR Script Execution via PowerShell

Detection of PowerShell execution initiated via Crowdstrike Real Time Response (RTR) 'runscript' command, potentially indicating malicious actors leveraging compromised Crowdstrike Dashboard access to execute commands on remote hosts using encoded commands.

Splunk Enterprise +3 living-off-the-land rtr script-execution
2r 1t