Windows SimpleHelp Permissions Tampering
Detects the execution of icacls.exe to grant 'Full Control' permissions to the 'Everyone' group for SimpleHelp RMM
Sigma

Detects the execution of icacls.exe to grant 'Full Control' permissions to the 'Everyone' group for SimpleHelp RMM

Already have an account?