Analytics BIOC
Low
✕
Uncommon remote monitoring and management tool
An uncommon Remote Monitoring and Management (RMM) product was observed.
- Module:
- Platform Analytics
- Data source:
- XDR Agent
ATT&CK tactics: Command and Control (TA0011)
ATT&CK techniques: Remote Access Tools (T1219)
Attacker's goals:
Accessing a remote machine with full interactive graphic interface capabilities.
Investigative actions:
Check if the product usage is approved. Ask the owners of the machine if they knowingly used this software. Investigate why the software was being used. Check if it was executed remotely or locally.
- Test period:
- N/A (single event)
- Deduplication:
- 1 Day
4 variations:
- Uncommon renamed remote monitoring and management tool Medium (parent: Low)
- Uncommon remote monitoring and management tool (browser origin) Informational (parent: Low)
- Uncommon remote monitoring and management tool extracted from an internet-downloaded archive and executed Low
- Uncommon remote monitoring and management tool downloaded from an uncommon source and executed Medium (parent: Low)