Live public case
Confirmed compromise
Last activity Sep 30, 8:48:58 AM PDT
highImpact confirmed
Evidence-grounded assessment
Not required
Response contains non-reflected process identity output
- Protected workloads
- One protected workload
- Progression
- Within-workload activity
- Severity basis
- Maximum incident posture
Observed impact
- Remote command execution
- Server identity disclosure
- System discovery
- System information disclosure
Recommended actions
Attack timeline
1 incident threads
Live progression remains visible; PII, native endpoints, hashes, and private identities do not.
- 1Confirmed compromiseconfirmed
Response contains non-reflected process identity output