CVE-2024-1709

• Potentially Suspicious File Download From File Sharing Domain Via PowerShell.EXE
• Suspicious PowerShell IEX Execution Patterns
• Remote Access Tool - ScreenConnect Potential Suspicious Remote Command Execution
• Remote Access Tool - Simple Help Execution
• User Added To Highly Privileged Group
• Weak or Abused Passwords In CLI
• CVE-2024-1212 Exploitation - Progress Kemp LoadMaster Unauthenticated Command Injection
• CVE-2024-1708 - ScreenConnect Path Traversal Exploitation
• ScreenConnect User Database Modification
• CVE-2024-1709 - ScreenConnect Authentication Bypass Exploitation
• ScreenConnect User Database Modification - Security
• ScreenConnect - SlashAndGrab Exploitation Indicators
• Remote Access Tool - ScreenConnect Remote Command Execution - Hunting