diff --git a/bin/validate.py b/bin/validate.py index b4e3fbce..5e97a016 100644 --- a/bin/validate.py +++ b/bin/validate.py @@ -12,7 +12,7 @@ import argparse from pathlib import Path from os import path, walk - +import datetime def check_md5_length(object): md5_len = 32 @@ -59,22 +59,25 @@ def check_network_structure(object): return f"ERROR: 'Ports' is not a list for object: {object['Name']}" return None -def check_disk_structure(object): - artifacts = object.get('Artifacts', {}) - disk = artifacts.get('Disk', []) - for item in disk: - if not isinstance(item, dict): - return f"ERROR: Disk item is not a dictionary for object: {object['Name']}" - if 'File' not in item: - return f"ERROR: Disk item is missing 'File' for object: {object['Name']}" - if 'Description' not in item: - return f"ERROR: Disk item is missing 'Description' for object: {object['Name']}" - if 'OS' not in item: - return f"ERROR: Disk item is missing 'OS' property for object: {object['Name']} - this will cause runtime errors in the frontend" - if not isinstance(item['OS'], str): - return f"ERROR: 'OS' property is not a string for object: {object['Name']}" +# Add this function to validate ISO 8601 format for Created +def check_created_iso8601(object, filename): + created = object.get('Created', None) + if created: + try: + datetime.datetime.fromisoformat(created) + except ValueError: + return f"ERROR: Created field is not valid ISO 8601 format in file {filename}: '{created}' (object: {object.get('Name', 'Unknown')})" + return None + +# Add this function to validate ISO 8601 format for LastModified +def check_last_modified_iso8601(object, filename): + last_modified = object.get('LastModified', None) + if last_modified: + try: + datetime.datetime.fromisoformat(last_modified) + except ValueError: + return f"ERROR: LastModified field is not valid ISO 8601 format in file {filename}: '{last_modified}' (object: {object.get('Name', 'Unknown')})" return None - def validate_schema(yaml_dir, schema_file, verbose): @@ -109,12 +112,13 @@ def validate_schema(yaml_dir, schema_file, verbose): error = True # Additional YAML checks - check_errors = [ + check_errors = [ check_md5_length(yaml_data), check_sha1_length(yaml_data), check_sha256_length(yaml_data), check_network_structure(yaml_data), - check_disk_structure(yaml_data), + check_created_iso8601(yaml_data, yaml_file), # ISO 8601 check for Created + check_last_modified_iso8601(yaml_data, yaml_file), # ISO 8601 check for LastModified ] for check_error in check_errors: @@ -124,7 +128,6 @@ def validate_schema(yaml_dir, schema_file, verbose): return error, errors - def main(yaml_dir, schema_file, verbose): error, errors = validate_schema(yaml_dir, schema_file, verbose) @@ -137,7 +140,6 @@ def main(yaml_dir, schema_file, verbose): else: print("No Errors found") - if __name__ == "__main__": # grab arguments parser = argparse.ArgumentParser(description="Validates YAML files in a directory against a JSON schema") @@ -150,4 +152,4 @@ def main(yaml_dir, schema_file, verbose): schema_file = args.schema_file verbose = args.verbose - main(yaml_dir, schema_file, verbose) \ No newline at end of file + main(yaml_dir, schema_file, verbose) diff --git a/yaml/247ithelp.com_(connectwise).yaml b/yaml/247ithelp.com_(connectwise).yaml index ec541510..c8afeee8 100644 --- a/yaml/247ithelp.com_(connectwise).yaml +++ b/yaml/247ithelp.com_(connectwise).yaml @@ -3,7 +3,7 @@ Description: 247ithelp.com (ConnectWise) is a remote monitoring and management ( tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/absolute_(computrace).yaml b/yaml/absolute_(computrace).yaml index c0adc1af..b48f4025 100644 --- a/yaml/absolute_(computrace).yaml +++ b/yaml/absolute_(computrace).yaml @@ -3,7 +3,7 @@ Description: Absolute (Computrace) is a remote monitoring and management (RMM) t More information will be added as it becomes available. Author: '' Created: '' -LastModified: 6-18-2024 +LastModified: '2024-06-18' Details: Website: '' PEMetadata: diff --git a/yaml/acronis_cyber_protect_(remotix).yaml b/yaml/acronis_cyber_protect_(remotix).yaml index 3098ff9b..991827c6 100644 --- a/yaml/acronis_cyber_protect_(remotix).yaml +++ b/yaml/acronis_cyber_protect_(remotix).yaml @@ -3,7 +3,7 @@ Description: Acronis Cyber Protect (Remotix) is a remote monitoring and manageme (RMM) tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/addigy.yaml b/yaml/addigy.yaml index ee760f84..45e70e1c 100644 --- a/yaml/addigy.yaml +++ b/yaml/addigy.yaml @@ -3,7 +3,7 @@ Description: Addigy is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-27-2024 +LastModified: '2024-02-27' Details: Website: '' PEMetadata: diff --git a/yaml/adobe_connect.yaml b/yaml/adobe_connect.yaml index d02d879d..427428b3 100644 --- a/yaml/adobe_connect.yaml +++ b/yaml/adobe_connect.yaml @@ -3,7 +3,7 @@ Description: Adobe Connect is a remote monitoring and management (RMM) tool. Mor information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-27-2024 +LastModified: '2024-02-27' Details: Website: '' PEMetadata: diff --git a/yaml/aeroadmin.yaml b/yaml/aeroadmin.yaml index 8566bf9b..84804d41 100644 --- a/yaml/aeroadmin.yaml +++ b/yaml/aeroadmin.yaml @@ -3,7 +3,7 @@ Description: AeroAdmin is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/aliwangwang-remote-control.yaml b/yaml/aliwangwang-remote-control.yaml index c6a9b17b..b1198b1c 100644 --- a/yaml/aliwangwang-remote-control.yaml +++ b/yaml/aliwangwang-remote-control.yaml @@ -3,7 +3,7 @@ Description: AliWangWang-remote-control is a remote monitoring and management (R tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/ammyyadmin.yml b/yaml/ammyyadmin.yml index 5838d5e5..340eb029 100644 --- a/yaml/ammyyadmin.yml +++ b/yaml/ammyyadmin.yml @@ -1,27 +1,32 @@ Name: Ammyy Admin -Description: Ammyy Admin is a remote monitoring and management (RMM) tool. Ammyy admin has been used by scammers to gain remote access to victims' computers. The tool is legitimate and is used by IT professionals for remote management. However, it has been abused by scammers to gain unauthorized access to victims' computers. The tool is free for personal use, but a license is required for commercial use. The tool allows for remote desktop control, file transfer, voice chat, and more. The tool is available for Windows only. - will be added as it becomes available. +Description: Ammyy Admin is a remote monitoring and management (RMM) tool. Ammyy admin + has been used by scammers to gain remote access to victims' computers. The tool + is legitimate and is used by IT professionals for remote management. However, it + has been abused by scammers to gain unauthorized access to victims' computers. The + tool is free for personal use, but a license is required for commercial use. The + tool allows for remote desktop control, file transfer, voice chat, and more. The + tool is available for Windows only. will be added as it becomes available. Author: '@kostsatsale' -Created: '2024/05/08' -LastModified: +Created: '2024-05-08' +LastModified: null Details: - Website: 'https://www.ammyy.com' + Website: https://www.ammyy.com PEMetadata: - Filename: 'AA_v3.exe' + Filename: AA_v3.exe OriginalFileName: '' - Description: 'Ammyy Admin' - Privileges: 'Curent User' - Free: 'Yes/1 active session at a time' - Verification: 'None' + Description: Ammyy Admin + Privileges: Curent User + Free: Yes/1 active session at a time + Verification: None SupportedOS: - - 'Windows' - Capabilities: - - 'Remote Management session' - - 'RDP Connection' - - 'File Transfer' - - 'Voice Chat' + - Windows + Capabilities: + - Remote Management session + - RDP Connection + - File Transfer + - Voice Chat Vulnerabilities: - - CVE-2013-5582 + - CVE-2013-5582 InstallationPaths: - C:\\ProgramData\\AMMYY\\* - AMMYY_Admin.exe @@ -30,60 +35,64 @@ Details: - '*\AMMYY_Admin.exe' Artifacts: Disk: - - File: '%programdata%\\AMMYY\\access.log' - Description: 'Ammyy Admin access log file. Contains information about the remote - IP address, the time of connection, bytes recv/send, and the ID of the remote machine.' - OS: Windows - Example: - - '20240805-22:20:45.962000 00000D98 - [0] PASSED authorization remoteId=XXXXXXXX; TCP by router 136.243.104.235:443' - - '20240805-22:22:34.139000 00000710 - [1] FAILED authorization remoteId=XXXXXXXX; TCP by router 136.243.104.235:443' - - '20240805-22:23:10.648000 00000D98 - [0] ENDED authorized session, bytes recv/send = 1164 / 115378' - - File: '%Binary_path%\\AA_v3.log' - Description: 'Ammyy Admin log file. Contains application related logs.' - OS: Windows - Example: - - '20240805-22:19:52.455000 00001318 - ERROR: ERROR: 2 RLEvent::TryToOpen(Global\AANS_FvwjZ_CHI)' - - '20240805-22:23:10.648000 00000D98 - ERROR: ERROR SetThreadDesktop(200) 170' - + - File: '%programdata%\\AMMYY\\access.log' + Description: Ammyy Admin access log file. Contains information about the remote + IP address, the time of connection, bytes recv/send, and the ID of the remote + machine. + OS: Windows + Example: + - 20240805-22:20:45.962000 00000D98 - [0] PASSED authorization remoteId=XXXXXXXX; + TCP by router 136.243.104.235:443 + - 20240805-22:22:34.139000 00000710 - [1] FAILED authorization remoteId=XXXXXXXX; + TCP by router 136.243.104.235:443 + - 20240805-22:23:10.648000 00000D98 - [0] ENDED authorized session, bytes recv/send + = 1164 / 115378 + - File: '%Binary_path%\\AA_v3.log' + Description: Ammyy Admin log file. Contains application related logs. + OS: Windows + Example: + - '20240805-22:19:52.455000 00001318 - ERROR: ERROR: 2 RLEvent::TryToOpen(Global\AANS_FvwjZ_CHI)' + - '20240805-22:23:10.648000 00000D98 - ERROR: ERROR SetThreadDesktop(200) 170' EventLog: - - EventID: 4688 - ProviderName: Microsoft-Security-Auditing - LogFile: Security.evtx - CommandLine: 'rundll32.exe "C:\ProgramData\AMMYY\aa_nts.dll",run' - Description: Execution of Ammyy Admin - - EventID: 7045 - ProviderName: Service Control Manager - LogFile: System.evtx - ServiceName: Ammyy Admin - ImagePath: "C:\\*\\AA_v3.exe" - Description: Ammyy Admin service installation event + - EventID: 4688 + ProviderName: Microsoft-Security-Auditing + LogFile: Security.evtx + CommandLine: rundll32.exe "C:\ProgramData\AMMYY\aa_nts.dll",run + Description: Execution of Ammyy Admin + - EventID: 7045 + ProviderName: Service Control Manager + LogFile: System.evtx + ServiceName: Ammyy Admin + ImagePath: C:\*\AA_v3.exe + Description: Ammyy Admin service installation event Registry: - - Path: HKU\.DEFAULT\Software\Ammyy\Admin - Key: 'hr3' - Type: 'Reg_Binary' - Description: 'Writing the hr3 binary in the registry. The hr3 is likely used to store admin-related information.' - - Path: HKLM\SYSTEM\ControlSet001\Control\SafeBoot\Network\AmmyyAdmin - Description: 'Ammyy Admin service allows AMMYY admin to run in safe mode.' + - Path: HKU\.DEFAULT\Software\Ammyy\Admin + Key: hr3 + Type: Reg_Binary + Description: Writing the hr3 binary in the registry. The hr3 is likely used to + store admin-related information. + - Path: HKLM\SYSTEM\ControlSet001\Control\SafeBoot\Network\AmmyyAdmin + Description: Ammyy Admin service allows AMMYY admin to run in safe mode. Network: - Description: Known remote domains Domains: - ammyy.com - '*ammyy.com' - - '136.243.104.235' - - '136.243.104.242' - - '136.243.18.122' - Ports: - - 5931 # Incoming - - 80 # Outgoing - - 443 # Outgoing - - 8080 # Outgoing + - 136.243.104.235 + - 136.243.104.242 + - 136.243.18.122 + Ports: + - 5931 + - 80 + - 443 + - 8080 Detections: - - Sigma: https://github.com/tsale/Sigma_rules/blob/main/Threat%20Hunting%20Queries/ammyy_admin.yml - Name: Detecting Ammy Admin RMM Agent Execution - Description: Detects the execution of the Ammy Admin RMM agent for remote management. +- Sigma: https://github.com/tsale/Sigma_rules/blob/main/Threat%20Hunting%20Queries/ammyy_admin.yml + Name: Detecting Ammy Admin RMM Agent Execution + Description: Detects the execution of the Ammy Admin RMM agent for remote management. References: - https://www.ammyy.com/en/admin_security.html - https://www.ammyy.com/en/admin_mu.html Acknowledgement: - - Person: "Kostas" - Handle: "@kostastsale" +- Person: Kostas + Handle: '@kostastsale' diff --git a/yaml/any_support.yaml b/yaml/any_support.yaml index 81200c7e..e1e4df45 100644 --- a/yaml/any_support.yaml +++ b/yaml/any_support.yaml @@ -3,7 +3,7 @@ Description: Any Support is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-27-2024 +LastModified: '2024-02-27' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/anyplace_control.yaml b/yaml/anyplace_control.yaml index 472d6665..29eaa2aa 100644 --- a/yaml/anyplace_control.yaml +++ b/yaml/anyplace_control.yaml @@ -3,7 +3,7 @@ Description: Anyplace Control is a remote monitoring and management (RMM) tool. information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/apple_remote_desktop.yaml b/yaml/apple_remote_desktop.yaml index e364dd16..a543ecec 100644 --- a/yaml/apple_remote_desktop.yaml +++ b/yaml/apple_remote_desktop.yaml @@ -3,7 +3,7 @@ Description: Apple Remote Desktop is a remote monitoring and management (RMM) to More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-24-2024 +LastModified: '2024-02-24' Details: Website: '' PEMetadata: diff --git a/yaml/auvik.yaml b/yaml/auvik.yaml index 3cb5fa85..7babd29a 100644 --- a/yaml/auvik.yaml +++ b/yaml/auvik.yaml @@ -3,7 +3,7 @@ Description: Auvik is a remote monitoring and management (RMM) tool. More inform will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/aweray.yaml b/yaml/aweray.yaml index 9604396c..639670b4 100644 --- a/yaml/aweray.yaml +++ b/yaml/aweray.yaml @@ -3,7 +3,7 @@ Description: AweRay is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/barracuda.yaml b/yaml/barracuda.yaml index 9c98b0fb..191df4fc 100644 --- a/yaml/barracuda.yaml +++ b/yaml/barracuda.yaml @@ -3,7 +3,7 @@ Description: Barracuda is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/basecamp.yaml b/yaml/basecamp.yaml index 958f7a3e..8a6773a7 100644 --- a/yaml/basecamp.yaml +++ b/yaml/basecamp.yaml @@ -3,7 +3,7 @@ Description: Basecamp is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/beamyourscreen.yaml b/yaml/beamyourscreen.yaml index d2774e90..cd8e5fb7 100644 --- a/yaml/beamyourscreen.yaml +++ b/yaml/beamyourscreen.yaml @@ -3,7 +3,7 @@ Description: BeamYourScreen is a remote monitoring and management (RMM) tool. Mo information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/beanywhere.yaml b/yaml/beanywhere.yaml index bdc62e8f..3a76553c 100644 --- a/yaml/beanywhere.yaml +++ b/yaml/beanywhere.yaml @@ -3,7 +3,7 @@ Description: BeAnyWhere is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/beinsync.yaml b/yaml/beinsync.yaml index 06e99bb1..2a16f8cb 100644 --- a/yaml/beinsync.yaml +++ b/yaml/beinsync.yaml @@ -3,7 +3,7 @@ Description: BeInSync is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: diff --git a/yaml/beyondtrust_(bomgar).yaml b/yaml/beyondtrust_(bomgar).yaml index fd2db578..32f3410b 100644 --- a/yaml/beyondtrust_(bomgar).yaml +++ b/yaml/beyondtrust_(bomgar).yaml @@ -3,7 +3,7 @@ Description: BeyondTrust (Bomgar) is a remote monitoring and management (RMM) to More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/centrastage_(now_datto).yaml b/yaml/centrastage_(now_datto).yaml index 54fb5747..ab4c6fb2 100644 --- a/yaml/centrastage_(now_datto).yaml +++ b/yaml/centrastage_(now_datto).yaml @@ -3,7 +3,7 @@ Description: CentraStage (Now Datto) is a remote monitoring and management (RMM) More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/centurion.yaml b/yaml/centurion.yaml index 71922649..c011d372 100644 --- a/yaml/centurion.yaml +++ b/yaml/centurion.yaml @@ -3,7 +3,7 @@ Description: Centurion is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/chrome_remote_desktop.yaml b/yaml/chrome_remote_desktop.yaml index ab26dd18..bcccadb8 100644 --- a/yaml/chrome_remote_desktop.yaml +++ b/yaml/chrome_remote_desktop.yaml @@ -3,7 +3,7 @@ Description: Chrome Remote Desktop is a remote monitoring and management (RMM) t More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/cloudflare_tunnel.yaml b/yaml/cloudflare_tunnel.yaml index 2c44afe3..75ffdc50 100644 --- a/yaml/cloudflare_tunnel.yaml +++ b/yaml/cloudflare_tunnel.yaml @@ -3,7 +3,7 @@ Description: CloudFlare Tunnel is a remote monitoring and management (RMM) tool. information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/comodo_rmm.yaml b/yaml/comodo_rmm.yaml index c6fdb7db..6e94fa55 100644 --- a/yaml/comodo_rmm.yaml +++ b/yaml/comodo_rmm.yaml @@ -3,7 +3,7 @@ Description: Comodo RMM is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/connectwise_automate_(labtech).yaml b/yaml/connectwise_automate_(labtech).yaml index fffb0e1b..437e4f19 100644 --- a/yaml/connectwise_automate_(labtech).yaml +++ b/yaml/connectwise_automate_(labtech).yaml @@ -3,7 +3,7 @@ Description: Connectwise Automate (LabTech) is a remote monitoring and managemen (RMM) tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/crossloop.yaml b/yaml/crossloop.yaml index 421983fe..d3a231ee 100644 --- a/yaml/crossloop.yaml +++ b/yaml/crossloop.yaml @@ -3,7 +3,7 @@ Description: CrossLoop is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/crosstec_remote_control.yaml b/yaml/crosstec_remote_control.yaml index 53664b70..8841ae72 100644 --- a/yaml/crosstec_remote_control.yaml +++ b/yaml/crosstec_remote_control.yaml @@ -3,7 +3,7 @@ Description: CrossTec Remote Control is a remote monitoring and management (RMM) More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/cruzcontrol.yaml b/yaml/cruzcontrol.yaml index 3c52d976..92d7737a 100644 --- a/yaml/cruzcontrol.yaml +++ b/yaml/cruzcontrol.yaml @@ -3,7 +3,7 @@ Description: CruzControl is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/dameware.yaml b/yaml/dameware.yaml index 9ed59642..653d21ee 100644 --- a/yaml/dameware.yaml +++ b/yaml/dameware.yaml @@ -3,7 +3,7 @@ Description: DameWare is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: @@ -19,8 +19,8 @@ Details: InstallationPaths: - SolarWinds-Dameware-DRS*.exe - DameWare Mini Remote Control*.exe - - 'C:\Windows\dwrcs\*' - - 'C:\Program Files\SolarWinds\Dameware Mini Remote Control\*' + - C:\Windows\dwrcs\* + - C:\Program Files\SolarWinds\Dameware Mini Remote Control\* - dntus*.exe - dwrcs.exe - '*\dwrcs\*' diff --git a/yaml/deskday.yaml b/yaml/deskday.yaml index c19b3b3d..3baf58ac 100644 --- a/yaml/deskday.yaml +++ b/yaml/deskday.yaml @@ -3,7 +3,7 @@ Description: DeskDay is a remote monitoring and management (RMM) tool. More info will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/desknets.yaml b/yaml/desknets.yaml index fc67bef7..ed475c50 100644 --- a/yaml/desknets.yaml +++ b/yaml/desknets.yaml @@ -3,7 +3,7 @@ Description: DeskNets is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: diff --git a/yaml/deskshare.yaml b/yaml/deskshare.yaml index a6b72c57..0e5a19b8 100644 --- a/yaml/deskshare.yaml +++ b/yaml/deskshare.yaml @@ -3,7 +3,7 @@ Description: DeskShare is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: diff --git a/yaml/desktopnow.yaml b/yaml/desktopnow.yaml index 9271ffd1..cae2f6da 100644 --- a/yaml/desktopnow.yaml +++ b/yaml/desktopnow.yaml @@ -3,7 +3,7 @@ Description: DesktopNow is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: diff --git a/yaml/distant_desktop.yaml b/yaml/distant_desktop.yaml index 3cbcaf70..9d185b0b 100644 --- a/yaml/distant_desktop.yaml +++ b/yaml/distant_desktop.yaml @@ -3,7 +3,7 @@ Description: Distant Desktop is a remote monitoring and management (RMM) tool. M information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/domotz.yaml b/yaml/domotz.yaml index ee3c678a..3bdcbccf 100644 --- a/yaml/domotz.yaml +++ b/yaml/domotz.yaml @@ -3,7 +3,7 @@ Description: Domotz is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/dw_service.yaml b/yaml/dw_service.yaml index e0ff9cf9..5735b241 100644 --- a/yaml/dw_service.yaml +++ b/yaml/dw_service.yaml @@ -3,7 +3,7 @@ Description: DW Service is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/echoware.yaml b/yaml/echoware.yaml index bd258764..175a7057 100644 --- a/yaml/echoware.yaml +++ b/yaml/echoware.yaml @@ -3,7 +3,7 @@ Description: Echoware is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/electric_ai_(kaseya).yaml b/yaml/electric_ai_(kaseya).yaml index 468ae5e9..b2504eea 100644 --- a/yaml/electric_ai_(kaseya).yaml +++ b/yaml/electric_ai_(kaseya).yaml @@ -3,7 +3,7 @@ Description: Electric AI (Kaseya) is a remote monitoring and management (RMM) to More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/emco_remote_console.yaml b/yaml/emco_remote_console.yaml index 7eaf81a6..607983e9 100644 --- a/yaml/emco_remote_console.yaml +++ b/yaml/emco_remote_console.yaml @@ -3,7 +3,7 @@ Description: EMCO Remote Console is a remote monitoring and management (RMM) too More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/encapto.yaml b/yaml/encapto.yaml index 73bacad8..ee590d31 100644 --- a/yaml/encapto.yaml +++ b/yaml/encapto.yaml @@ -3,7 +3,7 @@ Description: Encapto is a remote monitoring and management (RMM) tool. More info will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/ericom_accessnow.yaml b/yaml/ericom_accessnow.yaml index 44db6702..476ddc93 100644 --- a/yaml/ericom_accessnow.yaml +++ b/yaml/ericom_accessnow.yaml @@ -3,7 +3,7 @@ Description: Ericom AccessNow is a remote monitoring and management (RMM) tool. information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/ericom_connect.yaml b/yaml/ericom_connect.yaml index e6dbbb00..d24fbe4c 100644 --- a/yaml/ericom_connect.yaml +++ b/yaml/ericom_connect.yaml @@ -3,7 +3,7 @@ Description: Ericom Connect is a remote monitoring and management (RMM) tool. Mo information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/eset_remote_administrator.yaml b/yaml/eset_remote_administrator.yaml index 4087caa5..a7bfb889 100644 --- a/yaml/eset_remote_administrator.yaml +++ b/yaml/eset_remote_administrator.yaml @@ -3,7 +3,7 @@ Description: ESET Remote Administrator is a remote monitoring and management (RM tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/ezhelp.yaml b/yaml/ezhelp.yaml index bf9cdf02..45662107 100644 --- a/yaml/ezhelp.yaml +++ b/yaml/ezhelp.yaml @@ -3,7 +3,7 @@ Description: ezHelp is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/fastviewer.yaml b/yaml/fastviewer.yaml index f0f9dbbe..bab29c02 100644 --- a/yaml/fastviewer.yaml +++ b/yaml/fastviewer.yaml @@ -3,7 +3,7 @@ Description: FastViewer is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/fixme.yaml b/yaml/fixme.yaml index 634ce6a4..94da6aa3 100644 --- a/yaml/fixme.yaml +++ b/yaml/fixme.yaml @@ -3,7 +3,7 @@ Description: FixMe.it is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/fortra.yaml b/yaml/fortra.yaml index 93b88ab8..7ae29351 100644 --- a/yaml/fortra.yaml +++ b/yaml/fortra.yaml @@ -3,7 +3,7 @@ Description: Fortra is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/gatherplace-desktop_sharing.yaml b/yaml/gatherplace-desktop_sharing.yaml index b6db13d0..9328253e 100644 --- a/yaml/gatherplace-desktop_sharing.yaml +++ b/yaml/gatherplace-desktop_sharing.yaml @@ -3,7 +3,7 @@ Description: GatherPlace-desktop sharing is a remote monitoring and management ( tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/getscreen.yaml b/yaml/getscreen.yaml index be100de8..517d818a 100644 --- a/yaml/getscreen.yaml +++ b/yaml/getscreen.yaml @@ -3,7 +3,7 @@ Description: GetScreen is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/gotoassist.yaml b/yaml/gotoassist.yaml index fe4cd754..661ed1c5 100644 --- a/yaml/gotoassist.yaml +++ b/yaml/gotoassist.yaml @@ -3,7 +3,7 @@ Description: GoToAssist is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/gotohttp.yaml b/yaml/gotohttp.yaml index 72257db3..30d5df78 100644 --- a/yaml/gotohttp.yaml +++ b/yaml/gotohttp.yaml @@ -3,7 +3,7 @@ Description: GotoHTTP is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/goverlan.yaml b/yaml/goverlan.yaml index 3a6d638c..adb15bb3 100644 --- a/yaml/goverlan.yaml +++ b/yaml/goverlan.yaml @@ -3,7 +3,7 @@ Description: Goverlan is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/guacamole.yaml b/yaml/guacamole.yaml index 64d99708..bf8106c3 100644 --- a/yaml/guacamole.yaml +++ b/yaml/guacamole.yaml @@ -3,7 +3,7 @@ Description: Guacamole is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/helpbeam.yaml b/yaml/helpbeam.yaml index b2967b3a..51ac85ce 100644 --- a/yaml/helpbeam.yaml +++ b/yaml/helpbeam.yaml @@ -3,7 +3,7 @@ Description: HelpBeam is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/helpu.yaml b/yaml/helpu.yaml index f0995a3e..6241ceea 100644 --- a/yaml/helpu.yaml +++ b/yaml/helpu.yaml @@ -3,7 +3,7 @@ Description: HelpU is a remote monitoring and management (RMM) tool. More inform will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/hoptodesk.yaml b/yaml/hoptodesk.yaml index d05e1523..ce2decbd 100644 --- a/yaml/hoptodesk.yaml +++ b/yaml/hoptodesk.yaml @@ -1,8 +1,8 @@ Name: HopToDesk -Description: HopToDesk is a free Remote Management and Monitoring tool. -Author: 'Tyler Schultz' -Created: 7/17/2025 -LastModified: 7/17/2025 +Description: HopToDesk is a free Remote Management and Monitoring tool. +Author: Tyler Schultz +Created: '2025-07-17' +LastModified: '2025-07-17' Details: Website: https://www.hoptodesk.com/ PEMetadata: @@ -12,7 +12,7 @@ Details: Privileges: '' Free: 'Yes' Verification: '' - SupportedOS: + SupportedOS: - Windows - Linux - MacOS @@ -46,9 +46,9 @@ Artifacts: Description: N/A OS: MacOS EventLog: [] - Registry: - - Path: HKEY_USERS\*_Classes\HopToDesk\* - Description: null + Registry: + - Path: HKEY_USERS\*_Classes\HopToDesk\* + Description: null Network: - Description: Known remote domains Domains: @@ -64,5 +64,5 @@ References: - https://www.hoptodesk.com/#faqlink - https://gitlab.com/hoptodesk/hoptodesk Acknowledgement: - - Person: 'Tyler Schultz' - Handle: '@shockwave_ts' +- Person: Tyler Schultz + Handle: '@shockwave_ts' diff --git a/yaml/i'm_intouch.yaml b/yaml/i'm_intouch.yaml index 043c8e15..6c0da8cc 100644 --- a/yaml/i'm_intouch.yaml +++ b/yaml/i'm_intouch.yaml @@ -3,7 +3,7 @@ Description: I'm InTouch is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/instant_housecall.yaml b/yaml/instant_housecall.yaml index 40ec0488..0e2b7ac6 100644 --- a/yaml/instant_housecall.yaml +++ b/yaml/instant_housecall.yaml @@ -3,7 +3,7 @@ Description: Instant Housecall is a remote monitoring and management (RMM) tool. information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/instanthousecall.yaml b/yaml/instanthousecall.yaml index 7c951ff5..e2c44569 100644 --- a/yaml/instanthousecall.yaml +++ b/yaml/instanthousecall.yaml @@ -3,7 +3,7 @@ Description: Instant Housecall is a remote monitoring and management (RMM) tool. information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/intelliadmin_remote_control.yaml b/yaml/intelliadmin_remote_control.yaml index 9b5c796e..3976dfc1 100644 --- a/yaml/intelliadmin_remote_control.yaml +++ b/yaml/intelliadmin_remote_control.yaml @@ -3,7 +3,7 @@ Description: IntelliAdmin Remote Control is a remote monitoring and management ( tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/iperius_remote.yaml b/yaml/iperius_remote.yaml index e01fe9c5..67c974f7 100644 --- a/yaml/iperius_remote.yaml +++ b/yaml/iperius_remote.yaml @@ -3,7 +3,7 @@ Description: Iperius Remote is a remote monitoring and management (RMM) tool. Mo information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/isl_online.yaml b/yaml/isl_online.yaml index 2dccab2a..912e841c 100644 --- a/yaml/isl_online.yaml +++ b/yaml/isl_online.yaml @@ -3,7 +3,7 @@ Description: ISL Online is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/islonline.yaml b/yaml/islonline.yaml index d6c531e0..9d2f80a7 100644 --- a/yaml/islonline.yaml +++ b/yaml/islonline.yaml @@ -3,7 +3,7 @@ Description: ISL Online is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/itarian.yaml b/yaml/itarian.yaml index 761d31d5..a273bdca 100644 --- a/yaml/itarian.yaml +++ b/yaml/itarian.yaml @@ -3,7 +3,7 @@ Description: Itarian is a remote monitoring and management (RMM) tool. More info will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/itsupport247_(connectwise).yaml b/yaml/itsupport247_(connectwise).yaml index 845115d7..84904185 100644 --- a/yaml/itsupport247_(connectwise).yaml +++ b/yaml/itsupport247_(connectwise).yaml @@ -3,7 +3,7 @@ Description: ITSupport247 (ConnectWise) is a remote monitoring and management (R tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/itsupport247connectwise.yaml b/yaml/itsupport247connectwise.yaml index 01651ab5..41f980b6 100644 --- a/yaml/itsupport247connectwise.yaml +++ b/yaml/itsupport247connectwise.yaml @@ -3,7 +3,7 @@ Description: ITSupport247 (ConnectWise) is a remote monitoring and management (R tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/ivanti_remote_control.yaml b/yaml/ivanti_remote_control.yaml index fab40c28..9ef571f0 100644 --- a/yaml/ivanti_remote_control.yaml +++ b/yaml/ivanti_remote_control.yaml @@ -3,7 +3,7 @@ Description: Ivanti Remote Control is a remote monitoring and management (RMM) t More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/jump_cloud.yaml b/yaml/jump_cloud.yaml index c6ae062d..c915e519 100644 --- a/yaml/jump_cloud.yaml +++ b/yaml/jump_cloud.yaml @@ -3,7 +3,7 @@ Description: Jump Cloud is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: diff --git a/yaml/jump_desktop.yaml b/yaml/jump_desktop.yaml index 7a7e1a83..414983aa 100644 --- a/yaml/jump_desktop.yaml +++ b/yaml/jump_desktop.yaml @@ -3,7 +3,7 @@ Description: Jump Desktop is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/kabuto.yaml b/yaml/kabuto.yaml index af27262b..62bccc70 100644 --- a/yaml/kabuto.yaml +++ b/yaml/kabuto.yaml @@ -3,7 +3,7 @@ Description: Kabuto is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/khelpdesk.yaml b/yaml/khelpdesk.yaml index f10e01e4..676f59a6 100644 --- a/yaml/khelpdesk.yaml +++ b/yaml/khelpdesk.yaml @@ -3,7 +3,7 @@ Description: KHelpDesk is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: diff --git a/yaml/kickidler.yaml b/yaml/kickidler.yaml index 5d47287f..a36d86e5 100644 --- a/yaml/kickidler.yaml +++ b/yaml/kickidler.yaml @@ -3,7 +3,7 @@ Description: KickIdler is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/landesk.yaml b/yaml/landesk.yaml index 038e6451..983636e8 100644 --- a/yaml/landesk.yaml +++ b/yaml/landesk.yaml @@ -3,7 +3,7 @@ Description: LANDesk is a remote monitoring and management (RMM) tool. More info will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/laplink_everywhere.yaml b/yaml/laplink_everywhere.yaml index cf49aba6..287bcf30 100644 --- a/yaml/laplink_everywhere.yaml +++ b/yaml/laplink_everywhere.yaml @@ -3,7 +3,7 @@ Description: Laplink Everywhere is a remote monitoring and management (RMM) tool More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/laplink_gold.yaml b/yaml/laplink_gold.yaml index 39cf2483..b8f93c31 100644 --- a/yaml/laplink_gold.yaml +++ b/yaml/laplink_gold.yaml @@ -3,7 +3,7 @@ Description: Laplink Gold is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/level.io.yaml b/yaml/level.io.yaml index 57877805..1bd9abb9 100644 --- a/yaml/level.io.yaml +++ b/yaml/level.io.yaml @@ -3,7 +3,7 @@ Description: Level.io is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/level.yaml b/yaml/level.yaml index fe170123..89a467a8 100644 --- a/yaml/level.yaml +++ b/yaml/level.yaml @@ -1,70 +1,71 @@ Name: Level -Description: Level is a remote monitoring and management (RMM) tool. Threat actors ... -Author: 'Christian Henriksen, ITM8 | Improsec' -Created: '11/02-2024' -LastModified: '03/11-2025' +Description: Level is a remote monitoring and management (RMM) tool. Threat actors + ... +Author: Christian Henriksen, ITM8 | Improsec +Created: '2024-02-11' +LastModified: '2025-11-03' Details: - Website: 'https://level.io/' + Website: https://level.io/ PEMetadata: Filename: level.exe OriginalFileName: '' Description: '' - Privileges: 'User' - Free: 'Free' + Privileges: User + Free: Free Verification: 'True' SupportedOS: - - Windows + - Windows Capabilities: - - File Transfer - - File System Access - - Remote Control - - Automation & Scripting + - File Transfer + - File System Access + - Remote Control + - Automation & Scripting InstallationPaths: - - C:\Program Files\Level\* + - C:\Program Files\Level\* Artifacts: Disk: - - File: 'C:\Program Files\Level\level.exe' - Description: 'Level Binary' - OS: Windows - - File: 'C:\Program Files\Level\osqueryi.exe' - Description: 'A tool used by level to collect machine state information.' - OS: Windows - - File: 'C:\Program Files\Level\level.log' - Description: 'Client log file for Level.' - OS: Windows + - File: C:\Program Files\Level\level.exe + Description: Level Binary + OS: Windows + - File: C:\Program Files\Level\osqueryi.exe + Description: A tool used by level to collect machine state information. + OS: Windows + - File: C:\Program Files\Level\level.log + Description: Client log file for Level. + OS: Windows EventLog: - - EventID: 4698 - ProviderName: 'Microsoft-Windows-Security-Auditing' - LogFile: 'Security.evtx' - TaskName: 'Level Watchdog' - Location: '\Level' - Description: 'To ensure the Level agent is always running, a scheduled task...' - - EventID: 4697 - ProviderName: 'Microsoft-Windows-Security-Auditing' - LogFile: 'Security.evtx' - ServiceName: 'Level' - ServiceFileName: 'C:\Program Files\Level\level.exe --key --action=run' - ServiceAccount: 'LocalSystem' - ServiceStartType: 2 - Description: 'The Level Agent Service ...' - - EventID: 4798 - ProviderName: 'Microsoft-Windows-Security-Auditing' - LogFile: 'Security.evtx' - CallerProcessName: 'C:\Program Files\Level\osqueri.exe' - Description: 'Evidence of osqueryi doing automatic user/group enumeration.' + - EventID: 4698 + ProviderName: Microsoft-Windows-Security-Auditing + LogFile: Security.evtx + TaskName: Level Watchdog + Location: \Level + Description: To ensure the Level agent is always running, a scheduled task... + - EventID: 4697 + ProviderName: Microsoft-Windows-Security-Auditing + LogFile: Security.evtx + ServiceName: Level + ServiceFileName: C:\Program Files\Level\level.exe --key --action=run + ServiceAccount: LocalSystem + ServiceStartType: 2 + Description: The Level Agent Service ... + - EventID: 4798 + ProviderName: Microsoft-Windows-Security-Auditing + LogFile: Security.evtx + CallerProcessName: C:\Program Files\Level\osqueri.exe + Description: Evidence of osqueryi doing automatic user/group enumeration. Network: - - Description: 'Known remote domains' - Domains: - - 'level.io' - - 'builds.level.io' - - 'agents.level.io' - - 'online.level.io' - - 'downloads.io' - Ports: - - 443 + - Description: Known remote domains + Domains: + - level.io + - builds.level.io + - agents.level.io + - online.level.io + - downloads.io + Ports: + - 443 Detections: - - Sigma: 'https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/level_network_sigma.yml' - Description: 'Detects potential network activity of Level RMM tool' +- Sigma: https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/level_network_sigma.yml + Description: Detects potential network activity of Level RMM tool References: - - 'https://dfirtnt.wordpress.com/2023/09/05/rmm-level-io-forensic-artifacts-and-evidence/' - - 'https://docs.level.io/en/articles/9926456-level-watchdog-task' +- https://dfirtnt.wordpress.com/2023/09/05/rmm-level-io-forensic-artifacts-and-evidence/ +- https://docs.level.io/en/articles/9926456-level-watchdog-task diff --git a/yaml/levelio.yaml b/yaml/levelio.yaml index 9e1830ae..42432feb 100644 --- a/yaml/levelio.yaml +++ b/yaml/levelio.yaml @@ -3,7 +3,7 @@ Description: Level.io is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: @@ -23,15 +23,15 @@ Details: - level-remote-control-ffmpeg.exe Artifacts: Disk: - - File: 'C:\Program Files\Level\level.exe' - Description: 'Level Binary' - OS: Windows - - File: 'C:\Program Files\Level\osqueryi.exe' - Description: 'A tool used by level to collect machine state information.' - OS: Windows - - File: 'C:\Program Files\Level\level.log' - Description: 'Client log file for Level.' - OS: Windows + - File: C:\Program Files\Level\level.exe + Description: Level Binary + OS: Windows + - File: C:\Program Files\Level\osqueryi.exe + Description: A tool used by level to collect machine state information. + OS: Windows + - File: C:\Program Files\Level\level.log + Description: Client log file for Level. + OS: Windows EventLog: [] Registry: [] Network: diff --git a/yaml/litemanager.yaml b/yaml/litemanager.yaml index 7eed8521..df233fc7 100644 --- a/yaml/litemanager.yaml +++ b/yaml/litemanager.yaml @@ -3,7 +3,7 @@ Description: LiteManager is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/logmein_rescue.yaml b/yaml/logmein_rescue.yaml index 5092ccdf..b582d28f 100644 --- a/yaml/logmein_rescue.yaml +++ b/yaml/logmein_rescue.yaml @@ -3,7 +3,7 @@ Description: LogMeIn rescue is a remote monitoring and management (RMM) tool. Mo information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/manage_engine_(desktop_central).yaml b/yaml/manage_engine_(desktop_central).yaml index 2bc9f0d3..7cabfe4e 100644 --- a/yaml/manage_engine_(desktop_central).yaml +++ b/yaml/manage_engine_(desktop_central).yaml @@ -3,7 +3,7 @@ Description: Manage Engine (Desktop Central) is a remote monitoring and manageme (RMM) tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/microsoft_rdp.yaml b/yaml/microsoft_rdp.yaml index 6686c216..34b6fb95 100644 --- a/yaml/microsoft_rdp.yaml +++ b/yaml/microsoft_rdp.yaml @@ -3,7 +3,7 @@ Description: Microsoft RDP is a remote monitoring and management (RMM) tool. Mor information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/microsoft_tsc.yaml b/yaml/microsoft_tsc.yaml index 9c9a6228..5fd92283 100644 --- a/yaml/microsoft_tsc.yaml +++ b/yaml/microsoft_tsc.yaml @@ -3,7 +3,7 @@ Description: Microsoft TSC is a remote monitoring and management (RMM) tool. Mor information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-8-2024 +LastModified: '2024-02-08' Details: Website: '' PEMetadata: diff --git a/yaml/mikogo.yaml b/yaml/mikogo.yaml index 3f1682c7..109291bc 100644 --- a/yaml/mikogo.yaml +++ b/yaml/mikogo.yaml @@ -3,7 +3,7 @@ Description: Mikogo is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/mionet_(wd_anywhere_access).yaml b/yaml/mionet_(wd_anywhere_access).yaml index f83764e8..133dec20 100644 --- a/yaml/mionet_(wd_anywhere_access).yaml +++ b/yaml/mionet_(wd_anywhere_access).yaml @@ -3,7 +3,7 @@ Description: MioNet (WD Anywhere Access) is a remote monitoring and management ( tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/mremoteng.yaml b/yaml/mremoteng.yaml index ea718564..5f2dedb6 100644 --- a/yaml/mremoteng.yaml +++ b/yaml/mremoteng.yaml @@ -3,7 +3,7 @@ Description: mRemoteNG is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/msp360.yaml b/yaml/msp360.yaml index a7955145..fa8e241e 100644 --- a/yaml/msp360.yaml +++ b/yaml/msp360.yaml @@ -3,7 +3,7 @@ Description: MSP360 is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/mygreenpc.yaml b/yaml/mygreenpc.yaml index 948f5794..a6ed1677 100644 --- a/yaml/mygreenpc.yaml +++ b/yaml/mygreenpc.yaml @@ -3,7 +3,7 @@ Description: MyGreenPC is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: diff --git a/yaml/myivo.yaml b/yaml/myivo.yaml index c56071cd..557b82ad 100644 --- a/yaml/myivo.yaml +++ b/yaml/myivo.yaml @@ -3,7 +3,7 @@ Description: MyIVO is a remote monitoring and management (RMM) tool. More inform will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/n-able_advanced_monitoring_agent.yaml b/yaml/n-able_advanced_monitoring_agent.yaml index eb5800dd..c2622852 100644 --- a/yaml/n-able_advanced_monitoring_agent.yaml +++ b/yaml/n-able_advanced_monitoring_agent.yaml @@ -3,7 +3,7 @@ Description: N-Able Advanced Monitoring Agent is a remote monitoring and managem (RMM) tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/n-ableadvancedmonitoringagent.yaml b/yaml/n-ableadvancedmonitoringagent.yaml index 1ed09abc..12a045e8 100644 --- a/yaml/n-ableadvancedmonitoringagent.yaml +++ b/yaml/n-ableadvancedmonitoringagent.yaml @@ -3,7 +3,7 @@ Description: N-Able Advanced Monitoring Agent is a remote monitoring and managem (RMM) tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/naverisk.yaml b/yaml/naverisk.yaml index c73ab5f4..07854b3a 100644 --- a/yaml/naverisk.yaml +++ b/yaml/naverisk.yaml @@ -3,7 +3,7 @@ Description: Naverisk is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/netlock_rmm.yaml b/yaml/netlock_rmm.yaml index 9236b081..1d000400 100644 --- a/yaml/netlock_rmm.yaml +++ b/yaml/netlock_rmm.yaml @@ -1,8 +1,9 @@ Name: NetLock RMM -Description: NetLock RMM is an open source Remote Management and Monitoring tool with a paid support and cloud offering. -Author: 'Tyler Schultz' -Created: 7/18/2025 -LastModified: 7/18/2025 +Description: NetLock RMM is an open source Remote Management and Monitoring tool with + a paid support and cloud offering. +Author: Tyler Schultz +Created: '2025-07-18' +LastModified: '2025-07-18' Details: Website: https://www.netlockrmm.com/ PEMetadata: @@ -12,7 +13,7 @@ Details: Privileges: '' Free: '' Verification: '' - SupportedOS: + SupportedOS: - Windows - Linux - MacOS @@ -53,5 +54,5 @@ References: - https://www.netlockrmm.com - https://github.com/0x101-Cyber-Security/NetLock-RMM Acknowledgement: - - Person: 'Tyler Schultz' - Handle: '@shockwave_ts' \ No newline at end of file +- Person: Tyler Schultz + Handle: '@shockwave_ts' diff --git a/yaml/netop_remote_control_(impero_connect).yaml b/yaml/netop_remote_control_(impero_connect).yaml index 69117b2d..a87b846a 100644 --- a/yaml/netop_remote_control_(impero_connect).yaml +++ b/yaml/netop_remote_control_(impero_connect).yaml @@ -3,7 +3,7 @@ Description: Netop Remote Control (Impero Connect) is a remote monitoring and ma (RMM) tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/netreo.yaml b/yaml/netreo.yaml index e5b4197e..26eff03f 100644 --- a/yaml/netreo.yaml +++ b/yaml/netreo.yaml @@ -3,7 +3,7 @@ Description: Netreo is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/netsupport_manager.yaml b/yaml/netsupport_manager.yaml index a3e0fbe5..473f24b4 100644 --- a/yaml/netsupport_manager.yaml +++ b/yaml/netsupport_manager.yaml @@ -3,7 +3,7 @@ Description: NetSupport Manager is a remote monitoring and management (RMM) tool More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/netsupportmanager.yaml b/yaml/netsupportmanager.yaml index ee09a99b..4485c3cd 100644 --- a/yaml/netsupportmanager.yaml +++ b/yaml/netsupportmanager.yaml @@ -3,7 +3,7 @@ Description: NetSupport Manager is a remote monitoring and management (RMM) tool More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/neturo.yaml b/yaml/neturo.yaml index 488e146e..228a2cbe 100644 --- a/yaml/neturo.yaml +++ b/yaml/neturo.yaml @@ -3,7 +3,7 @@ Description: Neturo is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/netviewer_(gotomeet).yaml b/yaml/netviewer_(gotomeet).yaml index d71b0ed9..1870d5ad 100644 --- a/yaml/netviewer_(gotomeet).yaml +++ b/yaml/netviewer_(gotomeet).yaml @@ -3,7 +3,7 @@ Description: Netviewer (GoToMeet) is a remote monitoring and management (RMM) to More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/ngrok.yaml b/yaml/ngrok.yaml index 239de2f1..8d763e24 100644 --- a/yaml/ngrok.yaml +++ b/yaml/ngrok.yaml @@ -2,8 +2,8 @@ Name: ngrok Description: ngrok is a remote monitoring and management (RMM) tool. More information will be added as it becomes available. Author: Jose Hernandez -Created: 7/19/2024 -LastModified: 6/19/2025 +Created: '2024-07-19' +LastModified: '2025-06-19' Details: Website: '' PEMetadata: diff --git a/yaml/ninjarmm.yaml b/yaml/ninjarmm.yaml index bf697170..198221a3 100644 --- a/yaml/ninjarmm.yaml +++ b/yaml/ninjarmm.yaml @@ -3,7 +3,7 @@ Description: NinjaRMM is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/nomachine.yaml b/yaml/nomachine.yaml index 92902bb8..32cb5683 100644 --- a/yaml/nomachine.yaml +++ b/yaml/nomachine.yaml @@ -3,7 +3,7 @@ Description: NoMachine is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/ntr_remote.yaml b/yaml/ntr_remote.yaml index 3c412149..71689810 100644 --- a/yaml/ntr_remote.yaml +++ b/yaml/ntr_remote.yaml @@ -3,7 +3,7 @@ Description: NTR Remote is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/ocs_inventory.yaml b/yaml/ocs_inventory.yaml index b184ae28..d05b72c1 100644 --- a/yaml/ocs_inventory.yaml +++ b/yaml/ocs_inventory.yaml @@ -3,7 +3,7 @@ Description: OCS inventory is a remote monitoring and management (RMM) tool. Mor information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/optitune.yaml b/yaml/optitune.yaml index c11c31e5..b66490fe 100644 --- a/yaml/optitune.yaml +++ b/yaml/optitune.yaml @@ -3,7 +3,7 @@ Description: OptiTune is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: diff --git a/yaml/pandora_rc_(ehorus).yaml b/yaml/pandora_rc_(ehorus).yaml index 84edaaa6..cfb01e92 100644 --- a/yaml/pandora_rc_(ehorus).yaml +++ b/yaml/pandora_rc_(ehorus).yaml @@ -3,7 +3,7 @@ Description: Pandora RC (eHorus) is a remote monitoring and management (RMM) too More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/panorama9.yaml b/yaml/panorama9.yaml index 766e5f5e..ed8f8215 100644 --- a/yaml/panorama9.yaml +++ b/yaml/panorama9.yaml @@ -3,7 +3,7 @@ Description: Panorama9 is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/parallelsaccess.yaml b/yaml/parallelsaccess.yaml index 434c4f38..d840e587 100644 --- a/yaml/parallelsaccess.yaml +++ b/yaml/parallelsaccess.yaml @@ -3,7 +3,7 @@ Description: Parallels Access is a remote monitoring and management (RMM) tool. information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/parsec.yaml b/yaml/parsec.yaml index 3d978ff0..a297254f 100644 --- a/yaml/parsec.yaml +++ b/yaml/parsec.yaml @@ -1,75 +1,82 @@ Name: Parsec -Description: | - Parsec is a remote desktop streaming tool for remote access and monitoring, mainly used for gaming and collaboration. - - Remote desktop reimagined – a seamless 4k experience at up to 60 frames per second with near-zero latency. - Secure, flexible, effortless access to whatever you do, at any time, from wherever you go. - - Parsec focuses on real-time graphical interaction rather than system administration but can still be abused for lateral movement and initial access. -Author: 'Luca Di Bartolomeo & Matt Green' +Description: "Parsec is a remote desktop streaming tool for remote access and monitoring,\ + \ mainly used for gaming and collaboration. \n\nRemote desktop reimagined – a seamless\ + \ 4k experience at up to 60 frames per second with near-zero latency. \nSecure,\ + \ flexible, effortless access to whatever you do, at any time, from wherever you\ + \ go.\n\nParsec focuses on real-time graphical interaction rather than system administration\ + \ but can still be abused for lateral movement and initial access.\n" +Author: Luca Di Bartolomeo & Matt Green Created: '2025-03-16' -LastModified: '2025-5-16' +LastModified: '2025-05-16' Details: Website: https://parsec.app/ PEMetadata: - Filename: 'parsecd.exe' + Filename: parsecd.exe OriginalFileName: '' - Description: 'Parsec' - Product: 'Parsec' - Privileges: 'Current User' + Description: Parsec + Product: Parsec + Privileges: Current User Free: true Verification: false - SupportedOS: - - Windows - - Linux - - macOS - - Android - Capabilities: - - Remote Control - - GUI Support + SupportedOS: + - Windows + - Linux + - macOS + - Android + Capabilities: + - Remote Control + - GUI Support Vulnerabilities: [] - InstallationPaths: - - 'C:\Program Files\Parsec\*' - - 'parsecd.exe' - - 'pservice.exe' + InstallationPaths: + - C:\Program Files\Parsec\* + - parsecd.exe + - pservice.exe Artifacts: Disk: - - File: 'C:\Program Files\Parsec\parsecd.exe' - Description: 'Main parsec executable' - OS: Windows - Example: - - 'SHA256: 38011E713B4BE8577576062754CAD03E9899859488932AE4C9C83E5FBB5CB7D2' - - File: 'C:\Program Files\Parsec\pservice.exe' - Description: 'Background service managing input devices' - OS: Windows - Example: - - 'SHA256: CC62D22BF8A082621FA25FDEEE3150C17B09DBC09C9371E3DCDD6EC83967770C' - - File: 'C:\Program Files\Parsec\teams.exe' - Description: 'Parsec for teams collaboration and user session management' - OS: Windows - Example: - - 'SHA256: 6DC71B2E92B770DCFECA4A32C8F1787210311F731F1124754DF193EC22D5D13E' + - File: C:\Program Files\Parsec\parsecd.exe + Description: Main parsec executable + OS: Windows + Example: + - 'SHA256: 38011E713B4BE8577576062754CAD03E9899859488932AE4C9C83E5FBB5CB7D2' + - File: C:\Program Files\Parsec\pservice.exe + Description: Background service managing input devices + OS: Windows + Example: + - 'SHA256: CC62D22BF8A082621FA25FDEEE3150C17B09DBC09C9371E3DCDD6EC83967770C' + - File: C:\Program Files\Parsec\teams.exe + Description: Parsec for teams collaboration and user session management + OS: Windows + Example: + - 'SHA256: 6DC71B2E92B770DCFECA4A32C8F1787210311F731F1124754DF193EC22D5D13E' EventLog: - - EventID: 7045 - ProviderName: 'Service Control Manager' - LogFile: 'System.evtx' - ServiceName: 'parsecvirtualds' - ImagePath: '"\SystemRoot\System32\drivers\parsecvirtualds.sys"' - ServiceType: 'kernel mode driver' - StartType: 'demand start' - AccountName: 'System' - Description: 'Parsec service installation event' - Example: '704504000x8080000000000000596SystemComputerparsecvirtualds\SystemRoot\System32\drivers\parsecvirtualds.syskernel mode driverdemand start' + - EventID: 7045 + ProviderName: Service Control Manager + LogFile: System.evtx + ServiceName: parsecvirtualds + ImagePath: '"\SystemRoot\System32\drivers\parsecvirtualds.sys"' + ServiceType: kernel mode driver + StartType: demand start + AccountName: System + Description: Parsec service installation event + Example: 704504000x8080000000000000596SystemComputerparsecvirtualds\SystemRoot\System32\drivers\parsecvirtualds.syskernel mode driverdemand start Registry: [] Network: - - Description: 'Known domains used by Parsec' - Domains: - - 'parsec.app' - - 'parsec.gg' - - '*.parsec.app' - Ports: - - 443 - - 3478 + - Description: Known domains used by Parsec + Domains: + - parsec.app + - parsec.gg + - '*.parsec.app' + Ports: + - 443 + - 3478 Detections: - Sigma: https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/parsec_network_sigma.yaml Description: Detects Potential Parsec RMM Tool Network Activity @@ -78,11 +85,11 @@ Detections: - Sigma: https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/parsec_registry_sigma.yaml Description: Detects Potential Sigma RMM Tool Registry Activity References: - - 'https://parsec.app/' - - 'https://www.virustotal.com/gui/file/206cd186aaa431d3975eb30f682b83851ef4f81125d2004f53b681117da23ec6/behavior' - - 'https://x.com/malmoeb/status/1923255362318196951' +- https://parsec.app/ +- https://www.virustotal.com/gui/file/206cd186aaa431d3975eb30f682b83851ef4f81125d2004f53b681117da23ec6/behavior +- https://x.com/malmoeb/status/1923255362318196951 Acknowledgement: - - Person: 'Luca Di Bartolomeo' - Handle: '@LucaInfoSec' - - Person: 'Matt Green' - Handle: '@mgreen27' +- Person: Luca Di Bartolomeo + Handle: '@LucaInfoSec' +- Person: Matt Green + Handle: '@mgreen27' diff --git a/yaml/pcanywhere.yaml b/yaml/pcanywhere.yaml index edbdb720..adeb9a20 100644 --- a/yaml/pcanywhere.yaml +++ b/yaml/pcanywhere.yaml @@ -3,7 +3,7 @@ Description: pcAnywhere is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/pcnow.yaml b/yaml/pcnow.yaml index cd4a5172..53eab343 100644 --- a/yaml/pcnow.yaml +++ b/yaml/pcnow.yaml @@ -3,7 +3,7 @@ Description: Pcnow is a remote monitoring and management (RMM) tool. More inform will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/pcvisit.yaml b/yaml/pcvisit.yaml index aa47f934..b149cae4 100644 --- a/yaml/pcvisit.yaml +++ b/yaml/pcvisit.yaml @@ -3,7 +3,7 @@ Description: Pcvisit is a remote monitoring and management (RMM) tool. More info will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/pdq_connect.yaml b/yaml/pdq_connect.yaml index 22c7a2ef..b6afe93e 100644 --- a/yaml/pdq_connect.yaml +++ b/yaml/pdq_connect.yaml @@ -3,7 +3,7 @@ Description: PDQ Connect is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: @@ -22,8 +22,9 @@ Details: Artifacts: Disk: - File: C:\ProgramData\PDQ\PDQConnectAgent\PDQConnectAgent.db-journal - Description: Journal file that is part of the database system used by the PDQ Connect Agent to manage and store data related to its operations - OS: Windows + Description: Journal file that is part of the database system used by the PDQ + Connect Agent to manage and store data related to its operations + OS: Windows EventLog: [] Registry: [] Network: diff --git a/yaml/pilixo.yaml b/yaml/pilixo.yaml index dc897da2..a33a8540 100644 --- a/yaml/pilixo.yaml +++ b/yaml/pilixo.yaml @@ -3,7 +3,7 @@ Description: Pilixo is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/pocket_cloud_(wyse).yaml b/yaml/pocket_cloud_(wyse).yaml index a898ca0e..de1319d7 100644 --- a/yaml/pocket_cloud_(wyse).yaml +++ b/yaml/pocket_cloud_(wyse).yaml @@ -3,7 +3,7 @@ Description: Pocket Cloud (Wyse) is a remote monitoring and management (RMM) too More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/pocket_controller_(soti_xsight).yaml b/yaml/pocket_controller_(soti_xsight).yaml index b1ed50b8..db274f06 100644 --- a/yaml/pocket_controller_(soti_xsight).yaml +++ b/yaml/pocket_controller_(soti_xsight).yaml @@ -3,7 +3,7 @@ Description: Pocket Controller (Soti Xsight) is a remote monitoring and manageme (RMM) tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/psexec.yaml b/yaml/psexec.yaml index 0026fed2..0edefdf0 100644 --- a/yaml/psexec.yaml +++ b/yaml/psexec.yaml @@ -3,7 +3,7 @@ Description: PSEXEC is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/psexec_(clone).yaml b/yaml/psexec_(clone).yaml index 2c51a32f..e4fd258d 100644 --- a/yaml/psexec_(clone).yaml +++ b/yaml/psexec_(clone).yaml @@ -3,7 +3,7 @@ Description: PSEXEC (Clone) is a remote monitoring and management (RMM) tool. Mo information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/pulseway.yaml b/yaml/pulseway.yaml index d9d955c6..d9c0a7de 100644 --- a/yaml/pulseway.yaml +++ b/yaml/pulseway.yaml @@ -3,7 +3,7 @@ Description: Pulseway is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/qq_im-remote_assistance.yaml b/yaml/qq_im-remote_assistance.yaml index debe224d..c79e0009 100644 --- a/yaml/qq_im-remote_assistance.yaml +++ b/yaml/qq_im-remote_assistance.yaml @@ -3,7 +3,7 @@ Description: QQ IM-remote assistance is a remote monitoring and management (RMM) More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/quest_kace_agent_(formerly_dell_kace).yaml b/yaml/quest_kace_agent_(formerly_dell_kace).yaml index 07f5d954..c6f15026 100644 --- a/yaml/quest_kace_agent_(formerly_dell_kace).yaml +++ b/yaml/quest_kace_agent_(formerly_dell_kace).yaml @@ -3,7 +3,7 @@ Description: Quest KACE Agent (formerly Dell KACE) is a remote monitoring and ma (RMM) tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/rapid7.yaml b/yaml/rapid7.yaml index bc9d0eb7..d95fdb5f 100644 --- a/yaml/rapid7.yaml +++ b/yaml/rapid7.yaml @@ -3,7 +3,7 @@ Description: Rapid7 is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/rdp2tcp.yaml b/yaml/rdp2tcp.yaml index be36a2e9..3352d55b 100644 --- a/yaml/rdp2tcp.yaml +++ b/yaml/rdp2tcp.yaml @@ -3,7 +3,7 @@ Description: rdp2tcp is a remote monitoring and management (RMM) tool. More info will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/rdpview.yaml b/yaml/rdpview.yaml index f54fec90..0d46f21b 100644 --- a/yaml/rdpview.yaml +++ b/yaml/rdpview.yaml @@ -3,7 +3,7 @@ Description: RDPView is a remote monitoring and management (RMM) tool. More info will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/rdpwrap.yaml b/yaml/rdpwrap.yaml index c0722144..56c9c8f3 100644 --- a/yaml/rdpwrap.yaml +++ b/yaml/rdpwrap.yaml @@ -3,7 +3,7 @@ Description: rdpwrap is a remote monitoring and management (RMM) tool. More info will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/remobo.yaml b/yaml/remobo.yaml index f5afe194..948e58b7 100644 --- a/yaml/remobo.yaml +++ b/yaml/remobo.yaml @@ -3,7 +3,7 @@ Description: Remobo is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/remote.it.yaml b/yaml/remote.it.yaml index 6f375d3b..f5ecbcbc 100644 --- a/yaml/remote.it.yaml +++ b/yaml/remote.it.yaml @@ -3,7 +3,7 @@ Description: Remote.it is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/remote_desktop_plus.yaml b/yaml/remote_desktop_plus.yaml index 5b2889a7..cb2cb555 100644 --- a/yaml/remote_desktop_plus.yaml +++ b/yaml/remote_desktop_plus.yaml @@ -3,7 +3,7 @@ Description: Remote Desktop Plus is a remote monitoring and management (RMM) too More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/remote_manipulator_system.yaml b/yaml/remote_manipulator_system.yaml index 676ec114..5f741ea4 100644 --- a/yaml/remote_manipulator_system.yaml +++ b/yaml/remote_manipulator_system.yaml @@ -3,7 +3,7 @@ Description: Remote Manipulator System is a remote monitoring and management (RM tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/remote_utilities.yaml b/yaml/remote_utilities.yaml index dfb30627..4e03e575 100644 --- a/yaml/remote_utilities.yaml +++ b/yaml/remote_utilities.yaml @@ -3,7 +3,7 @@ Description: Remote Utilities is a remote monitoring and management (RMM) tool. information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/remotecall.yaml b/yaml/remotecall.yaml index 4c1efec0..28becdcd 100644 --- a/yaml/remotecall.yaml +++ b/yaml/remotecall.yaml @@ -3,7 +3,7 @@ Description: RemoteCall is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/remotepc.yaml b/yaml/remotepc.yaml index 6c1fc3b7..1fa06eb8 100644 --- a/yaml/remotepc.yaml +++ b/yaml/remotepc.yaml @@ -3,7 +3,7 @@ Description: RemotePC is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/remoteview.yaml b/yaml/remoteview.yaml index bb472c86..251b3839 100644 --- a/yaml/remoteview.yaml +++ b/yaml/remoteview.yaml @@ -3,7 +3,7 @@ Description: RemoteView is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/res_automation_manager.yaml b/yaml/res_automation_manager.yaml index aaed1198..079d8fdb 100644 --- a/yaml/res_automation_manager.yaml +++ b/yaml/res_automation_manager.yaml @@ -3,7 +3,7 @@ Description: RES Automation Manager is a remote monitoring and management (RMM) More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/royal_apps.yaml b/yaml/royal_apps.yaml index 5e9afe91..302781da 100644 --- a/yaml/royal_apps.yaml +++ b/yaml/royal_apps.yaml @@ -3,7 +3,7 @@ Description: Royal Apps is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/rport.yaml b/yaml/rport.yaml index dba49ae0..ec00cd85 100644 --- a/yaml/rport.yaml +++ b/yaml/rport.yaml @@ -3,7 +3,7 @@ Description: RPort is a remote monitoring and management (RMM) tool. More inform will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/rudesktop.yaml b/yaml/rudesktop.yaml index 2e77f58c..d8157a5f 100644 --- a/yaml/rudesktop.yaml +++ b/yaml/rudesktop.yaml @@ -3,7 +3,7 @@ Description: RuDesktop is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/rustdesk.yaml b/yaml/rustdesk.yaml index ba028e9f..f3685e01 100644 --- a/yaml/rustdesk.yaml +++ b/yaml/rustdesk.yaml @@ -3,7 +3,7 @@ Description: RustDesk is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: https://rustdesk.com/ PEMetadata: @@ -13,7 +13,7 @@ Details: Privileges: '' Free: 'Yes' Verification: '' - SupportedOS: + SupportedOS: - Windows - Linux - MacOS diff --git a/yaml/screenmeet.yaml b/yaml/screenmeet.yaml index fb3a8622..5384c516 100644 --- a/yaml/screenmeet.yaml +++ b/yaml/screenmeet.yaml @@ -3,7 +3,7 @@ Description: ScreenMeet is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/seetrol.yaml b/yaml/seetrol.yaml index 21fe47ae..be82f23c 100644 --- a/yaml/seetrol.yaml +++ b/yaml/seetrol.yaml @@ -3,7 +3,7 @@ Description: Seetrol is a remote monitoring and management (RMM) tool. More info will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/senso.cloud.yaml b/yaml/senso.cloud.yaml index ab7cd6d7..6ee3a3f3 100644 --- a/yaml/senso.cloud.yaml +++ b/yaml/senso.cloud.yaml @@ -3,7 +3,7 @@ Description: Senso.cloud is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/servereye.yaml b/yaml/servereye.yaml index d53c71e1..f4473cf6 100644 --- a/yaml/servereye.yaml +++ b/yaml/servereye.yaml @@ -3,7 +3,7 @@ Description: ServerEye is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/showmypc.yaml b/yaml/showmypc.yaml index 75f04f01..9174179c 100644 --- a/yaml/showmypc.yaml +++ b/yaml/showmypc.yaml @@ -3,7 +3,7 @@ Description: ShowMyPC is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/simplehelp.yaml b/yaml/simplehelp.yaml index c659d46a..fa80c7e0 100644 --- a/yaml/simplehelp.yaml +++ b/yaml/simplehelp.yaml @@ -3,7 +3,7 @@ Description: SimpleHelp is a remote monitoring and management (RMM) tool. More i will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/site24x7.yaml b/yaml/site24x7.yaml index 27daee5c..9da31d20 100644 --- a/yaml/site24x7.yaml +++ b/yaml/site24x7.yaml @@ -3,7 +3,7 @@ Description: Site24x7 is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-13-2024 +LastModified: '2024-02-13' Details: Website: '' PEMetadata: diff --git a/yaml/skyfex.yaml b/yaml/skyfex.yaml index 8944c129..994ff125 100644 --- a/yaml/skyfex.yaml +++ b/yaml/skyfex.yaml @@ -3,7 +3,7 @@ Description: SkyFex is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/sophos-remote_management_system.yaml b/yaml/sophos-remote_management_system.yaml index 75d287e0..1ee557f7 100644 --- a/yaml/sophos-remote_management_system.yaml +++ b/yaml/sophos-remote_management_system.yaml @@ -3,7 +3,7 @@ Description: Sophos-Remote Management System is a remote monitoring and manageme (RMM) tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/sorillus.yaml b/yaml/sorillus.yaml index a91fc358..04e5b9a0 100644 --- a/yaml/sorillus.yaml +++ b/yaml/sorillus.yaml @@ -3,7 +3,7 @@ Description: Sorillus is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/splashtop_remote.yaml b/yaml/splashtop_remote.yaml index bf91d921..3fd15fa3 100644 --- a/yaml/splashtop_remote.yaml +++ b/yaml/splashtop_remote.yaml @@ -3,7 +3,7 @@ Description: Splashtop Remote is a remote monitoring and management (RMM) tool. information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/spyanywhere.yaml b/yaml/spyanywhere.yaml index 01ee9dcb..c4cc91e5 100644 --- a/yaml/spyanywhere.yaml +++ b/yaml/spyanywhere.yaml @@ -3,7 +3,7 @@ Description: SpyAnywhere is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-9-2024 +LastModified: '2024-02-09' Details: Website: '' PEMetadata: diff --git a/yaml/sunlogin.yaml b/yaml/sunlogin.yaml index f8b7ee07..550bf9b1 100644 --- a/yaml/sunlogin.yaml +++ b/yaml/sunlogin.yaml @@ -3,7 +3,7 @@ Description: SunLogin is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: diff --git a/yaml/superops.yaml b/yaml/superops.yaml index 6513adc8..4920571d 100644 --- a/yaml/superops.yaml +++ b/yaml/superops.yaml @@ -3,7 +3,7 @@ Description: SuperOps is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/supremo.yaml b/yaml/supremo.yaml index 566068c2..03212133 100644 --- a/yaml/supremo.yaml +++ b/yaml/supremo.yaml @@ -3,7 +3,7 @@ Description: Supremo is a remote monitoring and management (RMM) tool. More info will be added as it becomes available. Author: '' Created: '' -LastModified: 2-13-2024 +LastModified: '2024-02-13' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/syncro.yaml b/yaml/syncro.yaml index 4bcd2721..dbc0e690 100644 --- a/yaml/syncro.yaml +++ b/yaml/syncro.yaml @@ -3,7 +3,7 @@ Description: Syncro is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-13-2024 +LastModified: '2024-02-13' Details: Website: '' PEMetadata: diff --git a/yaml/synergy.yaml b/yaml/synergy.yaml index 795f2fa5..f1336b83 100644 --- a/yaml/synergy.yaml +++ b/yaml/synergy.yaml @@ -3,7 +3,7 @@ Description: Synergy is a remote monitoring and management (RMM) tool. More info will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: diff --git a/yaml/syspectr.yaml b/yaml/syspectr.yaml index ec6b2fe2..2da9bd4e 100644 --- a/yaml/syspectr.yaml +++ b/yaml/syspectr.yaml @@ -3,7 +3,7 @@ Description: Syspectr is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: diff --git a/yaml/tactical_rmm.yaml b/yaml/tactical_rmm.yaml index 09c18f2b..55b2c723 100644 --- a/yaml/tactical_rmm.yaml +++ b/yaml/tactical_rmm.yaml @@ -3,7 +3,7 @@ Description: Tactical RMM is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/tailscale.yaml b/yaml/tailscale.yaml index 102157a3..f5d27041 100644 --- a/yaml/tailscale.yaml +++ b/yaml/tailscale.yaml @@ -3,7 +3,7 @@ Description: Tailscale is a remote monitoring and management (RMM) tool. More in will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/tanium.yaml b/yaml/tanium.yaml index f57a5068..335edca5 100644 --- a/yaml/tanium.yaml +++ b/yaml/tanium.yaml @@ -3,7 +3,7 @@ Description: Tanium is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/teledesktop.yaml b/yaml/teledesktop.yaml index bb8aae73..a0566567 100644 --- a/yaml/teledesktop.yaml +++ b/yaml/teledesktop.yaml @@ -3,7 +3,7 @@ Description: TeleDesktop is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/tigervnc.yaml b/yaml/tigervnc.yaml index 4753fd88..1804bf1d 100644 --- a/yaml/tigervnc.yaml +++ b/yaml/tigervnc.yaml @@ -3,7 +3,7 @@ Description: TigerVNC is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-26-2024 +LastModified: '2024-02-26' Details: Website: '' PEMetadata: diff --git a/yaml/tightvnc.yaml b/yaml/tightvnc.yaml index ee32ffad..4740b990 100644 --- a/yaml/tightvnc.yaml +++ b/yaml/tightvnc.yaml @@ -3,7 +3,7 @@ Description: TightVNC is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/todesk.yaml b/yaml/todesk.yaml index 94bc4cce..7799bd7c 100644 --- a/yaml/todesk.yaml +++ b/yaml/todesk.yaml @@ -3,7 +3,7 @@ Description: ToDesk is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/turbomeeting.yaml b/yaml/turbomeeting.yaml index 30c4a4a5..62d53389 100644 --- a/yaml/turbomeeting.yaml +++ b/yaml/turbomeeting.yaml @@ -3,7 +3,7 @@ Description: TurboMeeting is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/ultraviewer.yaml b/yaml/ultraviewer.yaml index 1470ef8f..752723fd 100644 --- a/yaml/ultraviewer.yaml +++ b/yaml/ultraviewer.yaml @@ -3,7 +3,7 @@ Description: UltraViewer is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/ultravnc.yaml b/yaml/ultravnc.yaml index 1f959684..f07bce7f 100644 --- a/yaml/ultravnc.yaml +++ b/yaml/ultravnc.yaml @@ -3,7 +3,7 @@ Description: UltraVNC is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/updatesimplehelp.yaml b/yaml/updatesimplehelp.yaml index 6136668a..a4d6ac14 100644 --- a/yaml/updatesimplehelp.yaml +++ b/yaml/updatesimplehelp.yaml @@ -1,11 +1,11 @@ Name: SimpleHelp Description: SimpleHelp is a remote monitoring and management (RMM) tool. More information will be added as it becomes available. -Author: 'Phyo Paing Htun' +Author: Phyo Paing Htun Created: '' -LastModified: 16/10/2024 +LastModified: '2024-10-16' Details: - Website: 'https://simple-help.com/' + Website: https://simple-help.com/ PEMetadata: Filename: '' OriginalFileName: '' diff --git a/yaml/visual_studio_dev_tunnel.yaml b/yaml/visual_studio_dev_tunnel.yaml index 4694407d..20872152 100644 --- a/yaml/visual_studio_dev_tunnel.yaml +++ b/yaml/visual_studio_dev_tunnel.yaml @@ -3,7 +3,7 @@ Description: Visual Studio Dev Tunnel is a remote monitoring and management (RMM tool. More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-7-2024 +LastModified: '2024-02-07' Details: Website: '' PEMetadata: diff --git a/yaml/vnc.yaml b/yaml/vnc.yaml index 7dc44420..414669a3 100644 --- a/yaml/vnc.yaml +++ b/yaml/vnc.yaml @@ -3,7 +3,7 @@ Description: VNC is a remote monitoring and management (RMM) tool. More informat will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/webex_(remote_access).yaml b/yaml/webex_(remote_access).yaml index a552bd55..dcf72029 100644 --- a/yaml/webex_(remote_access).yaml +++ b/yaml/webex_(remote_access).yaml @@ -3,7 +3,7 @@ Description: WebEx (Remote Access) is a remote monitoring and management (RMM) t More information will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/webrdp.yaml b/yaml/webrdp.yaml index 368d7c1f..0f8e6ce4 100644 --- a/yaml/webrdp.yaml +++ b/yaml/webrdp.yaml @@ -3,7 +3,7 @@ Description: WebRDP is a remote monitoring and management (RMM) tool. More infor will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/weezo.yaml b/yaml/weezo.yaml index ecd0d10c..c3b69266 100644 --- a/yaml/weezo.yaml +++ b/yaml/weezo.yaml @@ -3,7 +3,7 @@ Description: Weezo is a remote monitoring and management (RMM) tool. More inform will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/xeox.yaml b/yaml/xeox.yaml index b67a7ed0..8884a8af 100644 --- a/yaml/xeox.yaml +++ b/yaml/xeox.yaml @@ -3,7 +3,7 @@ Description: Xeox is a remote monitoring and management (RMM) tool. More informa will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: @@ -14,7 +14,7 @@ Details: Free: '' Verification: '' SupportedOS: - - Windows + - Windows Capabilities: [] Vulnerabilities: [] InstallationPaths: diff --git a/yaml/zabbix_agent.yaml b/yaml/zabbix_agent.yaml index 15a1173c..83753024 100644 --- a/yaml/zabbix_agent.yaml +++ b/yaml/zabbix_agent.yaml @@ -3,7 +3,7 @@ Description: Zabbix Agent is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/zerotier.yaml b/yaml/zerotier.yaml index 57292666..5705e4e9 100644 --- a/yaml/zerotier.yaml +++ b/yaml/zerotier.yaml @@ -3,7 +3,7 @@ Description: ZeroTier is a remote monitoring and management (RMM) tool. More inf will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: diff --git a/yaml/zohoassist.yaml b/yaml/zohoassist.yaml index ad3fd743..67fa2905 100644 --- a/yaml/zohoassist.yaml +++ b/yaml/zohoassist.yaml @@ -3,7 +3,7 @@ Description: Zoho Assist is a remote monitoring and management (RMM) tool. More will be added as it becomes available. Author: '' Created: '' -LastModified: 2-14-2024 +LastModified: '2024-02-14' Details: Website: '' PEMetadata: