HIGH 'Command-line arguments match Mimikatz execution' along with 8 other issues

RESOLVED SECURITY TESTING ID: #77 | Created: 2026-01-02 09:51:17
XDR Console
9
Alerts
1
Hosts
4
Files
0
Network
Incident Overview

'Command-line arguments match Mimikatz execution' along with 8 other issues generated by XDR BIOC and XDR Agent detected on host desktop-fnumv3u involving user desktop-fnumv3u\user

9
2026-01-02 10:14
Unassigned
XDR BIOC, XDR Agent
Malware Collection Credential Access
Affected Hosts & Users
desktop-fnumv3u\user
MITRE ATT&CK Mapping
TA0006 - Credential Access
T1003 - OS Credential Dumping
File Artifacts 4
File Name Path SHA256 Signature Verdict Actions
MegaGenerator.exe - 8b13dc94b8bb83116e6a44d654858757b82ccd3c9de9aa378796cfe5760fb88c SIGNATURE_UNSIGNED UNKNOWN VT
cmd.exe - badf4752413cb0cbdc03fb95820ca167f0cdc63b597ccdb5ef43111180e088b0 SIGNATURE_SIGNED UNKNOWN VT
powershell.exe - 9785001b0dcf755eddb8af294a373c0b87b2498660f724e76c4d53f9c217c7a3 SIGNATURE_SIGNED UNKNOWN VT
UltimateXdrGenerator.exe - 82fabb35db24a714b179c912f8c0cb90ef174c8db9d6c5bbc59346da7478d82d SIGNATURE_UNSIGNED UNKNOWN VT
Network Artifacts 0
No network artifacts found for this incident
Process Artifacts 9
Process Command Line Parent Process User
UltimateXdrGenerator.exe "C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate... cmd.exe DESKTOP-FNUMV3U\User
UltimateXdrGenerator.exe "C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate... cmd.exe DESKTOP-FNUMV3U\User
UltimateXdrGenerator.exe "C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate... cmd.exe DESKTOP-FNUMV3U\User
UltimateXdrGenerator.exe "C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate... cmd.exe DESKTOP-FNUMV3U\User
UltimateXdrGenerator.exe "C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate... cmd.exe DESKTOP-FNUMV3U\User
UltimateXdrGenerator.exe "C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate... cmd.exe DESKTOP-FNUMV3U\User
MegaGenerator.exe "C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e... cmd.exe DESKTOP-FNUMV3U\User
UltimateXdrGenerator.exe "C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate... cmd.exe DESKTOP-FNUMV3U\User
UltimateXdrGenerator.exe "C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate... cmd.exe DESKTOP-FNUMV3U\User
Registry Artifacts 0
No registry artifacts found for this incident
Analyst Verdict
HIGH
  • Isolate affected endpoints
  • Investigate all related alerts
  • Document findings
Summary
9
Alerts
1
Hosts
4
Files
0
Network
Alert Categories
Malware Collection Credential Access
Timeline
01-02 10:14:39
Incident Modified
Status or details updated
01-02 10:14:39
Incident Resolved
resolved security testing
01-02 10:12:19
PowerShell runs with known Mimikatz arguments
medium - Detected
01-02 10:12:19
Command-line arguments match Mimikatz execution
high - Detected
01-02 10:12:18
Suspicious Process Creation
medium - Prevented (Blocked)
01-02 09:58:19
PowerShell runs with known Mimikatz arguments
medium - Detected
01-02 09:58:19
Command-line arguments match Mimikatz execution
high - Detected
01-02 09:58:18
Suspicious Process Creation
medium - Prevented (Blocked)
01-02 09:53:01
WildFire Malware
medium - Prevented (Blocked)
01-02 09:51:17
Incident Created
#77 - 'Command-line arguments match Mimikatz execution' along with 8 other issues
01-02 09:51:17
MegaGenerator.exe
Verdict: Unknown
01-02 09:51:17
cmd.exe
Verdict: Unknown
01-02 09:51:17
powershell.exe
Verdict: Unknown
01-02 09:51:17
UltimateXdrGenerator.exe
Verdict: Unknown
01-02 09:51:06
PowerShell runs with known Mimikatz arguments
medium - Detected
01-02 09:51:05
Suspicious Process Creation
medium - Prevented (Blocked)