Remote Management and Monitoring tool - ZohoAssist - File Signature
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels. https://github.com/jischell-msft/RemoteManagementMonitoringTools
Microsoft Sentinel (KQL)
