Remote Access Tool - Team Viewer Session Started On Windows Host (ab70c354-d9ac-4e11-bbb6-ec8e3b153357)
Detects the command line executed when TeamViewer starts a session started by a remote host. Once a connection has been started, an investigator can verify the connection details by viewing the "incoming_connections.txt" log file in the TeamViewer folder.