HIGH 'Script Activity - 1023099560' along with 1 other issue
RESOLVED SECURITY TESTING
ID: #1144
|
Created: 2026-01-10 09:28:35
2
Alerts
1
Hosts
1
Files
0
Network
Incident Overview
'Script Activity - 1023099560' along with 1 other issue generated by XDR Agent detected on host book-r0be6s1nc3 involving user system
2
2026-01-10 09:32
Unassigned
XDR Agent
Malware
Affected Hosts & Users
system
MITRE ATT&CK Mapping
File Artifacts
1
| File Name | Path | SHA256 | Signature | Verdict | Actions |
|---|---|---|---|---|---|
| smss.exe | - |
1d51e30f1a7c5885fc359e625a569117c9b317e387ae4e34ee6250109be46315
|
SIGNATURE_SIGNED | UNKNOWN | VT |
Network Artifacts
0
No network artifacts found for this incident
Process Artifacts
2
| Process | Command Line | Parent Process | User |
|---|---|---|---|
| System | - | System | SYSTEM |
| System | - | System | SYSTEM |
Registry Artifacts
0
No registry artifacts found for this incident
Analyst Verdict
HIGH
Resolved via XdrTestManager IncidentLive
- Isolate affected endpoints
- Investigate all related alerts
- Document findings
Summary
2
Alerts
1
Hosts
1
Files
0
Network
Alert Categories
Malware
Timeline
01-10 09:32:41
Incident Modified
Status or details updated
01-10 09:32:41
Incident Resolved
resolved security testing
01-10 09:28:35
Incident Created
#1144 - 'Script Activity - 1023099560' along with 1 other issue
01-10 09:28:35
smss.exe
Verdict: Unknown
01-10 09:28:19
Powershell Activity - 364106421
high - Detected (Reported)
01-10 09:28:19
Script Activity - 1023099560
high - Detected (Reported)