Detection of NetMonitor RMM

Daniel Koifman@Koifsec

•updated Feb 26, 2026•1•0•32

The rule detects the execution of processes which are unique identifiers for the NetMonitor agent.