Remote Access Tool - Cmd.EXE Execution via AnyViewer
Detects the execution of 'cmd.exe' specifically when initiated by the AnyViewer Remote Monitoring and Management (RMM) agent during a remote management session. This activity could indicate an adversary using the legitimate remote access tool to execute commands on a compromised system.
Sigma
