RMMProject Task Request Endpoint Connection

Ibrahim Saud@tektrix

•updated Jun 17, 2026•4•0•3

Detects network connections specifically targeting the /tasks/get_worker endpoint used by RMMProject, initiated by 'RunSearch.exe'. This activity could indicate an adversary utilizing or masquerading as RMMProject for tasking and control.