AnyDesk system.conf Modified to Suppress Interactive Access Consent Prompt
Detects unauthorized modifications to the 'system.conf' configuration file associated with the AnyDesk remote desktop application. Adversaries may modify this file to change AnyDesk settings, specifically to suppress the requirement for user consent when establishing remote interactive sessions, effectively allowing for stealthy persistence and unauthorized remote access.
Cortex XDR
