Remote Access Tool - ScreenConnect Potential Suspicious Remote Command Execution

심각도 보통 Sigma 탐지 룰. Detects potentially suspicious child processes launched via the ScreenConnect client service.

관련 CVE: CVE-2024-1708, CVE-2024-1709

작성자: Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems), @Kostastsale · 원본 라이선스: DRL 1.1 · SigmaHQ 원본