Azure Sentinel

@AzureSentinel
50 followers965 downloads1,435 copies43 likes37,857 views

1,223 detections

Remote Management and Monitoring tool - DesktopNow - Create Process

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
008

Remote Management and Monitoring tool - RemotePC - File Signature

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
008

Remote Management and Monitoring tool - MSP360_CloudBerry - Create Process

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
008

Remote Management and Monitoring tool - NinjaRMM - Create Process

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
008

Remote Management and Monitoring tool - Naverisk - Create Process

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
008

Remote Management and Monitoring tool - MSP360_CloudBerry - File Signature

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
008

Remote Management and Monitoring tool - OptiTune - Create Process

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
008

Remote Management and Monitoring tool - FleetDeck - Network Connection

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
008

Remote Management and Monitoring tool - OptiTune - Network Connection

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
008

Remote Management and Monitoring tool - ServerEye - File Signature

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
008
Page 115 of 123