Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

RemCom Service File Creation

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects default RemCom service filename which indicates RemCom service installation and execution

Sigma

Tags

TA0002 - Execution T1569.002 - Service Execution S0029 - PsExec File Event Windows Windows Sysmonattack.executionattack.t1569.002attack.s0029

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?