avatar

Andry R

@madadrix261
Completionist
0 followers0 downloads5 copies1 like9 views

1 detection

Detects the execution of unauthorized Remote Monitoring and Management (RMM) tools shortly after either Microsoft Teams activity or a surge of inbound emails (email bombing) targeting the same user, a common precursor pattern used by threat actors for social engineering and initial access.
avatar
Andry R@madadrix261
avatar
Detections.ai Community
2 hours ago
519