Disabling security tools
Named by 2 kept items in this workspace.
Search every workspace for Disabling security tools. It matches the name as written, so it can find other things that share it.
The items that name it 2
pgrep and pkill scripts tried to terminate Cortex XDR processes
After achieving admin access, attacker attempted to disable Microsoft Defender and kill the Huntress agent
All techniques in this workspace.