Skip to content

Hide Navigation Hide TOC

Remote Access Tool - AnyDesk Piped Password Via CLI (b1377339-fda6-477a-b455-ac0923f9ec2c)

Detects piping the password to an anydesk instance via CMD and the '--set-password' flag.

Cluster A Galaxy A Cluster B Galaxy B Level
Remote Desktop Software - T1219.002 (d4287702-e2f7-4946-bdfa-2c7f5aaa5032) Attack Pattern Remote Access Tool - AnyDesk Piped Password Via CLI (b1377339-fda6-477a-b455-ac0923f9ec2c) Sigma-Rules 1
Remote Desktop Software - T1219.002 (d4287702-e2f7-4946-bdfa-2c7f5aaa5032) Attack Pattern Remote Access Tools - T1219 (4061e78c-1284-44b4-9116-73e4ac3912f7) Attack Pattern 2