Remote Monitoring and Management (RMM) software programs and services are often used by Enterprise and SMB IT to provide management and monitoring of remote endpoints.
Attackers have also begun to abuse these programs and services as means to maintain persistance or provide fall back command and control channels. A number of threat groups with varied and diverse goals, have been observed using RMM products to achieve missons of espionage, data theft, and ransomware.
This collection of Remote Management Monitoring tool artifacts is focused on providing defenders and investigators with up-to-date indicators and context.
- Action1
- Addigy
- AeroAdmin
- Alpemix
- Ammyy
- AnyDesk
- AnyplaceControl
- AnyViewer
- Atera
- Auvik
- AweSun
- BarracudaRMM
- BeamYourScreen
- BeAnywhere
- BeyondTrust
- BlueTrait.io
- ChromeRDP
- ConnectWise
- CrossLoop
- CrossTec
- DameWare
- DattoRMM
- DeskDay
- DesktopNow
- DistantDesktop
- DWService
- EHorus
- ElectricAI
- FleetDeck
- GetScreen
- IperiusRemote
- ISLOnline
- Itarian
- JumpCloud
- Kaseya
- Level
- LiteManager
- LogMeIn
- MeshCentral
- mRemoteNG
- MSP360_CloudBerry
- NAble
- Naverisk
- NetSupport
- NinjaRMM
- OptiTune
- Panorama9
- parsec.app
- PcVisit
- PDQ
- Pulseway
- RAdmin
- RealVNC
- RemoteDesktopPlus
- RemotePC
- RemoteUtilities
- RPort
- RustDesk
- ScreenMeet
- ServerEye
- ShowMyPC
- SimpleHelp
- Splashtop
- SupRemo
- SyncroMSP
- Syspectr
- TacticalRMM
- TeamViewer
- TechInline
- TigerVNC
- TightVNC
- TSPlus
- UltraViewer
- XMReality
- ZohoAssist
