JAMF MDM Potential Suspicious Child Process

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects potential suspicious child processes of "jamf". Could be a sign of potential abuse of Jamf as a C2 server as seen by Typhon MythicAgent.