RMM Tools Process Creation
Detects process creation for common RMM tools (AnyDesk, Bomgar/BeyondTrust, TeamViewer). The idea here would be to alert on non approved RMM tools, and anything outside of the one or few approved tools would be suspicious.
Sigma
