Phishing Abuses RMM Tools: Known IOC Match (MSP360/ScreenConnect Campaign)
Detects the presence or execution of known malicious Remote Monitoring and Management (RMM) tool binaries associated with phishing campaigns, such as those impersonating MSP360 or ScreenConnect.
Microsoft Sentinel (KQL)
