Remote Access Tool - ScreenConnect Remote Command Execution - Hunting — Detection Rule
Detects remote binary or command execution via the ScreenConnect Service. Use this rule in order to hunt for potentially anomalous executions originating from ScreenConnect