ScreenConnect client hidden via uninstall-list or service concealment

ills3c Intel&Coffee@Ills3C

•updated 8 days ago•11•0•18

Detects observable hiding actions targeting ScreenConnect (ConnectWise Control) clients, such as modifying registry keys to hide uninstall entries, using attrib.exe to set hidden attributes, or launching management tools with hidden window styles.