Windows RMM Tool Execution — Detection Rule

Detects process creation events of various remote access tools. Remote management tools, when used for legitimate purposes, can help IT professionals and system administrators remotely access and manage computer systems. However, threat actors may exploit these tools for malicious purposes.

Read the full analysis on IntelFusions