RustDesk Installed as Persistent Windows Service (Akira Intrusion Chain)
Detects the installation of RustDesk as a persistent Windows service. RustDesk is a remote access tool that has been observed in intrusion chains, including those involving Akira ransomware, to provide hands-on-keyboard access to threat actors.
YARA-L
