Remote assistance tool launch (Quick Assist/AnyDesk) - possible vishing-driven a
Detects the execution of legitimate remote-access software commonly used in social engineering attacks, such as Quick Assist and AnyDesk. These tools are frequently abused as an initial access or persistence mechanism by threat actors following initial contact via methods like vishing or email-based social engineering.
SentinelOne
