Remote Access Tool - ScreenConnect Potential Suspicious Remote Command Execution

SigmaHQ Detections@sigmaHQ

•updated Jun 13, 2025•0•0•2

Detects potentially suspicious child processes launched via the ScreenConnect client service.