Rule Info
Name
Renamed Network Lookout Execution - Remote Access Software
Author
Swachchhanda Shrawan Poudel (Nextron Systems)
Description
Detects execution of "Network Lookout Net Monitor for Employees Pro" that has been renamed. It is commercial employee monitoring software, that however, attackers have been observed to abuse for unauthorized surveillance and remote access.
Reference
Date
2026-03-23 00:00:00
Modified
None
Id
9b8d52a0-4f3e-4e1a-9c7b-6d8e2f5a3b1c
Tags
attack.defense-evasion attack.t1036.003 attack.command-and-control attack.t1219
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR