Security research

www.huntress.com/blog/series-of-unfortunate-rmm-events

https://www.huntress.com/blog/series-of-unfortunate-rmm-events

Published on: www.huntress.com

ATT&CK techniques those detections carry

T1219Remote Access Tools
T1219.002Remote Desktop Software
T1105Ingress Tool Transfer
T1036Masquerading
T1204User Execution
T1204.002Malicious File
T1218System Binary Proxy Execution
T1218.007Msiexec

3 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
Detection	Severity	Source	Published	Licence
Lure-Themed Internet-Delivered RMM Executable	Medium	Elastic detection rules	Oct 2, 2026	Elastic License 2.0
Potential RMM Execution from a Commonly Abused Web Service	Low	Elastic detection rules	Oct 2, 2026	Elastic License 2.0
RMM Software Installation from an Internet-Originated MSI	Low	Elastic detection rules	Sep 20, 2026	Elastic License 2.0

Showing 3 of 3

Filter in the catalogue