Skip to content
Threat Feed
Subscribe

Vendor

Palo Alto

2 briefs RSS
medium advisory

Abuse of Predefined BIOCs in Palo Alto Cortex XDR

Attackers may decrypt and abuse predefined Behavioral Indicators of Compromise (BIOCs) in Palo Alto Cortex XDR to evade detection or manipulate the system.

Cortex XDR cortex-xdr bioc evasion
2r 1t
medium advisory

Large ICMP Traffic Detection

This analytic identifies excessive ICMP traffic to external IP addresses exceeding 1,000 bytes, potentially indicating command and control activity, data exfiltration, or covert communication channels.

Splunk Enterprise +4 network-traffic command-and-control data-exfiltration
2r 1t