Incident #1270 - XDR Test Manager

MEDIUM 'WildFire Malware' along with 21 other issues

RESOLVED SECURITY TESTING ID: #1270 | Created: 2026-01-11 08:27:06

XDR Console

Alerts

Hosts

Files

Network

Incident Overview

'WildFire Malware' along with 21 other issues generated by XDR Agent detected on host teahee involving user dokji

Alert Count 22

Modified 2026-01-11 19:59

Assigned To Unassigned

Sources XDR Agent

Alert Categories

Malware

Affected Hosts & Users

Hosts (1)

Users (1)

dokji

MITRE ATT&CK Mapping

No MITRE ATT&CK data available for this incident

Related Alerts 22

ID	Severity	Name	Host	Action	Time
26345	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 19:42
26010	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 19:27
25919	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 18:39
25604	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 18:21
25544	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 17:36
25179	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 17:15
25136	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 16:33
25094	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 16:09
24930	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 15:30
24869	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 15:03
24859	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 14:27
24852	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 13:57
24841	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 13:24
24836	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 12:51
24831	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 12:21
24826	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 11:45
24822	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 11:18
24814	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 10:39
24807	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 10:15
24724	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 09:33
24680	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 09:12
24629	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-11 08:27

File Artifacts 2

File Name	Path	SHA256	Signature	Verdict	Actions
MegaGenerator.exe	-	`e11e17aa538668963d62d7ba8fcb3e705b437f4a8e3e3333c2afc0c3552b2edf`	SIGNATURE_UNAVAILABLE	UNKNOWN	VT
UltimateXdrGenerator.exe	-	`af362370742931d534c21901f6b41bf8d034bf5d7e80a571d5eca6bc871ff499`	SIGNATURE_UNAVAILABLE	UNKNOWN	VT

Network Artifacts 0

No network artifacts found for this incident

Process Artifacts 22

Process	Command Line	Parent Process	User
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji

Registry Artifacts 0

No registry artifacts found for this incident

Analyst Verdict

Classification

Risk Level

MEDIUM

Resolution Notes

Bulk resolved via XdrTestManager IncidentLive

Recommended Actions

Monitor for similar activity
Verify remediation complete

Summary

Alerts

Hosts

Files

Network

Alert Categories

Malware

Timeline

01-11 19:59:02

Incident Modified

Status or details updated

01-11 19:59:02

Incident Resolved

resolved security testing

01-11 19:42:01

WildFire Malware

medium - Prevented (Blocked)

01-11 19:27:01

WildFire Malware

medium - Prevented (Blocked)

01-11 18:39:02

WildFire Malware

medium - Prevented (Blocked)

01-11 18:21:01

WildFire Malware

medium - Prevented (Blocked)

01-11 17:36:02

WildFire Malware

medium - Prevented (Blocked)

01-11 17:15:01

WildFire Malware

medium - Prevented (Blocked)

01-11 16:33:02

WildFire Malware

medium - Prevented (Blocked)

01-11 16:09:01

WildFire Malware

medium - Prevented (Blocked)

01-11 15:30:02

WildFire Malware

medium - Prevented (Blocked)

01-11 15:03:01

WildFire Malware

medium - Prevented (Blocked)

01-11 14:27:01

WildFire Malware

medium - Prevented (Blocked)

01-11 13:57:01

WildFire Malware

medium - Prevented (Blocked)

01-11 13:24:01

WildFire Malware

medium - Prevented (Blocked)

01-11 12:51:01

WildFire Malware

medium - Prevented (Blocked)

01-11 12:21:01

WildFire Malware

medium - Prevented (Blocked)

01-11 11:45:01

WildFire Malware

medium - Prevented (Blocked)

01-11 11:18:01

WildFire Malware

medium - Prevented (Blocked)

01-11 10:39:01

WildFire Malware

medium - Prevented (Blocked)

01-11 10:15:01

WildFire Malware

medium - Prevented (Blocked)

01-11 09:33:01

WildFire Malware

medium - Prevented (Blocked)

01-11 09:12:01

WildFire Malware

medium - Prevented (Blocked)

01-11 08:27:06

Incident Created

#1270 - 'WildFire Malware' along with 21 other issues

01-11 08:27:06

MegaGenerator.exe

Verdict: Unknown