Remote Access Tool - ScreenConnect Installation Execution (75bfe6e6-cd8e-429e-91d3-03921e1d7962)
Detects ScreenConnect program starts that establish a remote access to a system.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| External Remote Services - T1133 (10d51417-ee35-4589-b1ff-b6df1c334e8d) | Attack Pattern | Remote Access Tool - ScreenConnect Installation Execution (75bfe6e6-cd8e-429e-91d3-03921e1d7962) | Sigma-Rules | 1 |