Tag
medium
advisory
Abuse of RemCom for Lateral Movement and Remote Execution
1 rule 1 TTPRemCom is an open-source tool functionally similar to PsExec, frequently abused by threat actors to perform lateral movement and remote command execution within Windows environments.
lateral-movement
execution
remcom
1r
1t
medium
advisory
RemCom Administrative Tool Named Pipe Usage
1 rule 2 TTPsDetection of the default named pipe used by the RemCom remote administration tool, which is frequently leveraged by attackers for lateral movement and remote command execution.
lateral-movement
execution
remcom
sysmon
1r
2t