PUA - Radmin Viewer Utility Execution (5817e76f-4804-41e6-8f1d-5fa0b3ecae2d)
Detects the execution of Radmin which can be abused by an adversary to remotely control Windows machines
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Software Deployment Tools - T1072 (92a78814-b191-47ca-909c-1ccfe3777414) | Attack Pattern | PUA - Radmin Viewer Utility Execution (5817e76f-4804-41e6-8f1d-5fa0b3ecae2d) | Sigma-Rules | 1 |