Remote Access Tool - AnyDesk Incoming Connection (d58ba5c6-0ed7-4b9d-a433-6878379efda9)
Detects incoming connections to AnyDesk. This could indicate a potential remote attacker trying to connect to a listening instance of AnyDesk and use it as potential command and control channel.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Remote Access Software - T1219 (4061e78c-1284-44b4-9116-73e4ac3912f7) | Attack Pattern | Remote Access Tool - AnyDesk Incoming Connection (d58ba5c6-0ed7-4b9d-a433-6878379efda9) | Sigma-Rules | 1 |