Intel Name: Remote access tool – screenconnect remote command execution – hunting
Date of Scan: January 7, 2025
Impact: Medium
Summary: Detects the remote execution of binaries or commands through the ScreenConnect Service. This rule can be used to hunt for potentially unusual activities initiated via ScreenConnect.
