Red teaming tool detection by XDR

[RamyashreeMada]

Can you confirm whether XDR can block "Brute Ratel C4" tool executing threats.

[abdrahman]

Hello @RamyashreeMada , 

Hope you are doing well. Please note Cortex XDR does cover Brute Ratel C4 tool and also the Brute Ratel C4 Command and control traffic. Please follow this link and search for "Brute Ratel C4" for your references. Thank you. 

If you require any further information please reach out to us again via this thread. Thank you. 

[afurze]

Hi RamyashreeMada,

Unfortunately, the Threat Vault link provided by @abdrahman is only applicable for our NGFW solution.  For Cortex XDR coverage information, please submit a TAC case.