Rule Info
Name
Remote Access Tool Services Have Been Installed - System
Author
Connor Martin, Nasreddine Bencherchali
Description
Detects service installation of different remote access tools software. These software are often abused by threat actors to perform
Date
2022-12-23 00:00:00
Modified
2023-06-22 00:00:00
Id
1a31b18a-f00c-4061-9900-f735b96c99fc
Tags
attack.persistence attack.t1543.003 attack.t1569.002
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Nasreddine Bencherchali
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12
github-actions[bot]
Merge PR #4841 from @nasbench - Promote older rules status from `experimental` to `test`
2024-05-02
Scan your endpoints, forensic images or collected files with our portable scanner THOR