Azure Sentinel

@AzureSentinel
50 followers944 downloads1,418 copies43 likes37,653 views

1,223 detections

Remote Management and Monitoring tool - TacticalRMM - Create Process

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0011

Remote Management and Monitoring tool - Splashtop - Create Process

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0011

Remote Management and Monitoring tool - RPort - Create Process

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0011

Remote Management and Monitoring tool - Pulseway - Create Process

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0011

Remote Management and Monitoring tool - MeshCentral - File Signature

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0011

Remote Management and Monitoring tool - BarracudaRMM - Network Connection

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0011

Remote Management and Monitoring tool - RustDesk - Network Connection

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0011

Remote Management and Monitoring tool - BeyondTrust - File Signature

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0011

Remote Management and Monitoring tool - XMReality - File Signature

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0011

Remote Management and Monitoring tool - Pulseway - Network Connection

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0011
Page 102 of 123