forked from magicsword-io/LOLRMM
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathinsync.yaml
32 lines (32 loc) · 826 Bytes
/
insync.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
Name: Insync
Description: Insync is a remote monitoring and management (RMM) tool. More information
will be added as it becomes available.
Author: ''
Created: ''
LastModified: ''
Details:
Website: ''
PEMetadata:
Filename: ''
OriginalFileName: ''
Description: ''
Privileges: ''
Free: ''
Verification: ''
SupportedOS: []
Capabilities: []
Vulnerabilities: []
InstallationPaths:
- C:\Users\USERNAME\AppData\Roaming\Insync\App\Insync.exe
- '*Users\*\AppData\Roaming\Insync\App\Insync.exe'
- '*\Insync.exe'
Artifacts:
Disk: []
EventLog: []
Registry: []
Network: []
Detections:
- Sigma: https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/insync_processes_sigma.yml
Description: Detects potential processes activity of Insync RMM tool
References: []
Acknowledgement: []