centurion.yaml

Name: Centurion
Description: Centurion is a remote monitoring and management (RMM) tool. More information
  will be added as it becomes available.
Author: ''
Created: ''
LastModified: 2/7/2024
Details:
  Website: ''
  PEMetadata:
    Filename: ''
    OriginalFileName: ''
    Description: ''
  Privileges: ''
  Free: ''
  Verification: ''
  SupportedOS: []
  Capabilities: []
  Vulnerabilities: []
  InstallationPaths:
  - ctiserv.exe
Artifacts:
  Disk: []
  EventLog: []
  Registry: []
  Network:
  - Description: Known remote domains
    Domains:
    - centuriontech.com
    Ports: []
Detections:
- Sigma: https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/centurion_network_sigma.yml
  Description: Detects potential network activity of Centurion RMM tool
- Sigma: https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/centurion_processes_sigma.yml
  Description: Detects potential processes activity of Centurion RMM tool
References:
- https://data443.atlassian.net/servicedesk/customer/portal/20
Acknowledgement: []