RemCom Service Installation and Execution Detection

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•3•0•21

Detects the installation and execution of the RemCom service, which is often used for remote administration and can be leveraged by adversaries for lateral movement or persistence.