AnyDesk Installed and Registered as Auto-Start Windows Service
Detects the creation of a Windows service associated with the AnyDesk remote access application using the sc.exe utility. This behavior often indicates the unauthorized installation or persistence setup of a remote access tool.
Cortex XDR
