Remote Access Tools
An adversary may use legitimate remote access tools to establish an interactive command and control channel within a network. Remote access tools create a session between two trusted hosts through a graphical interface, a command line interaction, a protocol tunnel via development or management software, or hardware-level access such as KVM (Keyboard, Video, Mouse) over IP solutions. Desktop support software (usually graphical interface) and remote management software (typically command line int...
BY SOURCE
PROCEDURES (27)
Auto-extracted: 3 detections for remote
Auto-extracted: 2 detections for http
Auto-extracted: 2 detections for download
Auto-extracted: 2 detections for tunnel
Auto-extracted: 2 detections for remote
Auto-extracted: 2 detections for remote
Auto-extracted: 2 detections for download
Auto-extracted: 2 detections for tunnel
Auto-extracted: 1 detections for general monitoring
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for tunnel
Auto-extracted: 1 detections for service
Auto-extracted: 1 detections for persist
Auto-extracted: 1 detections for persist
Auto-extracted: 1 detections for process creation monitoring
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for persist
Auto-extracted: 1 detections for tunnel
Auto-extracted: 1 detections for service
Auto-extracted: 1 detections for http
Auto-extracted: 1 detections for registry
Auto-extracted: 1 detections for persist
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for api
Auto-extracted: 1 detections for suspicious
Auto-extracted: 1 detections for powershell
Auto-extracted: 1 detections for powershell