RustDesk Session Permission Bypass PoC Execution and Unauthorized Access
Detects anomalous child process execution by RustDesk, including shell spawning (cmd, powershell, etc.) or internal session-related process manipulation which may indicate unauthorized remote control, session hijacking, or exploitation of proof-of-concept permission bypass tools.
Cortex XDR
