TiFlux RMM - Anomalous Parent Process (T1036)

Ibrahim Saud@tektrix

•updated Jun 22, 2026•0•0•1

Correlates the installation of TiFlux originating from a highly suspicious parent process (like an Office macro, wscript, or an unsigned executable).