NetSupport Manager Multi-Mechanism Persistence Setup

Ibrahim Saud@tektrix

•updated 22 days ago•1•0•4

Detects instances where known NetSupport Manager binaries (client32.exe, netsupportmanager.exe, pcicfgnt.exe) are used to perform persistence-related actions, such as creating a new Windows service, adding a scheduled task, or modifying Run/Winlogon registry keys.