AnyDesk Service Installation
Detects the execution of AnyDesk with flags intended to install it as a persistent service. Legitimate remote monitoring and management (RMM) tools like AnyDesk are increasingly weaponized by threat actors to establish robust, stealthy persistence that evades standard malware detection.
Sigma
