deskday.yaml

Name: DeskDay
Description: DeskDay is a remote monitoring and management (RMM) tool. More information
  will be added as it becomes available.
Author: ''
Created: ''
LastModified: 2/7/2024
Details:
  Website: ''
  PEMetadata:
    Filename: ''
    OriginalFileName: ''
    Description: ''
  Privileges: ''
  Free: ''
  Verification: ''
  SupportedOS: []
  Capabilities: []
  Vulnerabilities: []
  InstallationPaths:
  - ultimate_*.exe
Artifacts:
  Disk: []
  EventLog: []
  Registry: []
  Network:
  - Description: Known remote domains
    Domains:
    - deskday.ai
    - app.deskday.ai
    Ports: []
Detections:
- Sigma: https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/deskday_network_sigma.yml
  Description: Detects potential network activity of DeskDay RMM tool
- Sigma: https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/deskday_processes_sigma.yml
  Description: Detects potential processes activity of DeskDay RMM tool
References:
- https://support.deskday.ai/en/articles/8235973-installing-the-end-user-application-ultimate
Acknowledgement: []