Skip to content
Threat Feed
Subscribe

Tag

Edr-Abuse

1 brief RSS
medium advisory

Abuse of CrowdStrike Real Time Response for Remote Command Execution

Attackers with unauthorized access to a CrowdStrike management console can leverage the 'runscript' functionality to execute arbitrary PowerShell commands on remote Windows hosts.

Falcon living-off-the-land powershell edr-abuse
1r 1t