Egress TLS Connection to Known Third-Party RMM Vendor Domain

Ali AlEnezi@site

•updated Sep 15, 2026•2•0•2

Detects outbound TLS traffic to known remote access and management software domains (e.g., ScreenConnect, AnyDesk, TeamViewer), which are frequently abused by adversaries for establishing Command and Control (C2) channels.