CmdID

CmdID / Techniques / T1021

T1021.005 Remote Services: VNC

Adversaries may use Valid Accounts to remotely control machines using Virtual Network Computing (VNC). MITRE ATT&CK

1 Sigma rule T1021.005 on attack.mitre.org

Part of

MITRE ATT&CK
T1021Remote Services

Sigma rules tagged with it

process creation, the highest levels first
highSuspicious UltraVNC ExecutionBhabesh Raj · Windows