Azure Hybrid Connection Manager Service Installation via Registry

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•25

Detects the installation of the Azure Hybrid Connection Manager service by monitoring registry modifications. This service can be used to allow remote code execution from Azure functions, potentially as a method for adversaries to establish persistence or facilitate further access.