Process Creation of LOLRMM Tools
Detects process creation for common RMM tools. The idea here would be to alert on non approved RMM tools, and anything outside of the one or few approved tools would be suspicious/malicious.
Gravwell
Detects process creation for common RMM tools. The idea here would be to alert on non approved RMM tools, and anything outside of the one or few approved tools would be suspicious/malicious.
Already have an account?