topic Re: PoorTry kernel-mode Windows driver Detection/Prevention using CortexXDR? in Cortex XDR Discussions

PoorTry kernel-mode Windows driver Detection/Prevention using CortexXDR?

J.Suter — Thu, 29 Aug 2024 19:33:26 GMT

Wondering if we have any IOC, settings, content updates, to find and or inoculate against the PoorTry kernel-mode Windows driver. It's incredibly potent and resistant to defensive measures.

Latest article on it: PoorTry Windows driver evolves into a full-featured EDR wiper (bleepingcomputer.com)

Re: PoorTry kernel-mode Windows driver Detection/Prevention using CortexXDR?

aspatil — Mon, 09 Sep 2024 11:53:20 GMT

Hello @J.Suter ,

Thanks for reaching out on LiveCommunity!

Please open a TAC case to check the coverage .

If you feel this has answered your query, please let us know by clicking on Like and "mark this as a Solution".