Skip to content
Threat Feed

Tag

Remote-Management

1 brief RSS
medium advisory

Detection of Level RMM PowerShell Script Installer

This brief details the detection of the Level remote management tool PowerShell installer on Windows endpoints, which can be exploited by threat actors for malicious purposes to maintain persistence and execute commands, although it's a legitimate IT tool.

Splunk Enterprise +2 remote-management powershell rmm
2r 1t 1i