Windows 365 Client Execution

Monitors for the execution of Windows 365 native clients. UNC3753 abuses legitimate VDI clients on compromised personal devices to bypass initial corporate perimeters and access sensitive network segments.