Remote Access Tool - UltraViewer Execution
This rule detects the execution of the UltraViewer remote access tool. UltraViewer is a legitimate desktop support software that can be abused by adversaries to establish an interactive command and control channel to target systems. Detection is based on specific product, company, or original filename attributes associated with UltraViewer.
Sigma
