Remote Access Tool - ScreenConnect Potential Suspicious Remote Command Execution — Detection Rule

Detects potentially suspicious child processes launched via the ScreenConnect client service.

Read the full analysis on IntelFusions