Skip to content

Commit aa666c0

Browse files
jischell-msftjischell-msft
committed
initial push of tool details
1 parent 87ddb60 commit aa666c0

File tree

64 files changed

+1524
-0
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

64 files changed

+1524
-0
lines changed

‎AnyDesk/RMM_Summary_AnyDesk.md

+23
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for AnyDesk
2+
3+
### Company/ Project website:
4+
- https://www.anydesk.com/
5+
6+
### Historical context and detail
7+
-
8+
9+
### Process Indicators
10+
-
11+
-
12+
-
13+
14+
### Network Indicators
15+
- AnyDesk.com
16+
- api.playanext.com
17+
-
18+
19+
### File Signature Indicators
20+
- Signer: 'philandro Software GmbH'
21+
-
22+
-
23+

‎RMM/Action1/RMM_Summary_Action1.md

+22
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for Action1
2+
3+
### Company/ Project website:
4+
- https://www.action1.com/remote-access/
5+
6+
### Historical context and detail
7+
-
8+
9+
### Process Indicators
10+
-
11+
-
12+
-
13+
14+
### Network Indicators
15+
- server.action1.com
16+
-
17+
-
18+
19+
### File Signature Indicators
20+
- Action1
21+
-
22+
-

‎RMM/Addigy/RMM_Summary_Addigy.md

+23
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for Addigy
2+
3+
### Company/ Project website:
4+
- https://addigy.com/
5+
6+
7+
### Historical context and detail
8+
- Mac/IoS focus
9+
10+
### Process Indicators
11+
-
12+
-
13+
-
14+
15+
### Network Indicators
16+
-
17+
-
18+
-
19+
20+
### File Signature Indicators
21+
-
22+
-
23+
-

‎RMM/AeroAdmin/RMM_Summary_AeroAdmin.md

+22
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for AeroAdmin
2+
3+
### Company/ Project website:
4+
- https://www.aeroadmin.com/en/
5+
6+
### Historical context and detail
7+
-
8+
9+
### Process Indicators
10+
-
11+
-
12+
-
13+
14+
### Network Indicators
15+
- aeroadmin.com
16+
-
17+
-
18+
19+
### File Signature Indicators
20+
- AeroAdmin
21+
-
22+
-

‎RMM/Ammyy/RMM_Summary_Ammyy.md

+23
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for Ammyy
2+
3+
### Company/ Project website:
4+
- https://www.ammyy.com/en/
5+
6+
7+
### Historical context and detail
8+
-
9+
10+
### Process Indicators
11+
- Company name has 'ammyy'
12+
- Product name has 'ammyy admin'
13+
- Process name follows format @"aa_v([.]*)\.exe" by _default_
14+
15+
### Network Indicators
16+
- Network connection to 'ammyy.com' resources
17+
-
18+
-
19+
20+
### File Signature Indicators
21+
- Signer has 'Ammyy'
22+
-
23+
-

‎RMM/AnyDesk/RMM_Summary_AnyDesk.md

+22
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for AnyDesk
2+
3+
### Company/ Project website:
4+
- https://www.anydesk.com/
5+
6+
### Historical context and detail
7+
-
8+
9+
### Process Indicators
10+
-
11+
-
12+
-
13+
14+
### Network Indicators
15+
- AnyDesk.com
16+
- api.playanext.com
17+
-
18+
19+
### File Signature Indicators
20+
- Signer: 'philandro Software GmbH'
21+
-
22+
-

‎RMM/AnyViewer/RMM_Summary_AnyViewer.md

+25
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for AnyViewer
2+
3+
### Company/ Project website:
4+
- https://www.anyviewer.com/
5+
6+
### Historical context and detail
7+
-
8+
9+
### Process Indicators
10+
-
11+
-
12+
-
13+
14+
### Network Indicators
15+
- anyviewer.com
16+
- anyviewer.cn
17+
- aomeisoftware.com
18+
- aomeikeji.com
19+
-
20+
-
21+
22+
### File Signature Indicators
23+
- AOMEI International Network Limited
24+
-
25+
-

‎RMM/Atera/RMM_Summary_Atera.md

+22
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for Atera
2+
3+
### Company/ Project website:
4+
- https://www.atera.com/
5+
6+
### Historical context and detail
7+
-
8+
9+
### Process Indicators
10+
-
11+
-
12+
-
13+
14+
### Network Indicators
15+
- atera.com
16+
- atera-agent-heartbeat.*
17+
-
18+
19+
### File Signature Indicators
20+
- Atera Networks
21+
-
22+
-

‎RMM/AweSun/RMM_Summary_AweSun.md

+26
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for AweSun
2+
3+
### Company/ Project website:
4+
- https://sun.aweray.com/en/
5+
6+
### Historical context and detail
7+
-
8+
9+
### Process Indicators
10+
-
11+
-
12+
-
13+
14+
### Network Indicators
15+
- aweray.com
16+
- aweray.net
17+
- awerayimg.com
18+
- awesun.app
19+
-
20+
-
21+
22+
### File Signature Indicators
23+
- AweRay Limited
24+
- AweRay Pte. Ltd.
25+
-
26+
-

‎RMM/BarracudaRMM/RMM_Summary_BarracudaRMM.md

+31
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for BarracudaRMM
2+
3+
### Company/ Project website:
4+
- https://barracudamsp.com/product-details/barracuda-rmm-remote-monitoring-management/
5+
6+
7+
### Historical context and detail
8+
- Formerly AVG, Formerly Level Platforms
9+
- Uses PAExec https://www2.poweradmin.com/paexec/ and RemCom https://github.com/kavika13/RemCom for automated tasks and scripts
10+
- Barracuda RMM 12 SP4 and later
11+
```C:\Program Files (x86)\Barracuda RMM\```
12+
- Barracuda RMM pre-12_SP4
13+
```C:\Program Files (x86)\Level Platforms\```
14+
- Barracuda RMM install log (all arch, all versions)
15+
```C:\Program Files\Level Platforms\LPISetupLogs```
16+
17+
### Process Indicators
18+
-
19+
-
20+
-
21+
22+
### Network Indicators
23+
- rmm.barracudamsp.com
24+
- content.ivanti.com
25+
-
26+
27+
### File Signature Indicators
28+
- Barracuda Networks
29+
- AVG Technologies
30+
- LPI Level Platforms
31+
-

‎RMM/BeyondTrust/RMM_Summary_BeyondTrust.md

+26
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for BeyondTrust
2+
3+
### Company/ Project website:
4+
- https://www.beyondtrust.com/remote-support
5+
6+
7+
### Historical context and detail
8+
- Formerly Bomgar
9+
10+
### Process Indicators
11+
-
12+
-
13+
-
14+
15+
### Network Indicators
16+
- license.bomgar.com
17+
- bomgarcloud.com
18+
- beyondtrustcloud.com
19+
-
20+
21+
### File Signature Indicators
22+
- Bomgar Corporation
23+
- BeyondTrust Corporation
24+
- BeyondTrust Software
25+
-
26+
-

‎RMM/BlueTrait.io/RMM_Summary_BlueTrait.io.md

+23
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for BlueTrait.io
2+
3+
### Company/ Project website:
4+
- https://bluetrait.io/
5+
6+
7+
### Historical context and detail
8+
- Integrates/ uses ConnectWise Control
9+
10+
### Process Indicators
11+
-
12+
-
13+
-
14+
15+
### Network Indicators
16+
-
17+
-
18+
-
19+
20+
### File Signature Indicators
21+
-
22+
-
23+
-

‎RMM/ChromeRDP/RMM_Summary_ChromeRDP.md

+20
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for ChromeRDP
2+
3+
### Company/ Project website:
4+
- https://remotedesktop.google.com/
5+
6+
### Historical context and detail
7+
-
8+
9+
### Process Indicators
10+
-
11+
-
12+
-
13+
14+
### Network Indicators
15+
- remotedesktop-pa.googleapis.com
16+
17+
18+
### File Signature Indicators
19+
-
20+
-

‎RMM/ConnectWise/RMM_Summary_ConnectWise.md

+30
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for ConnectWise
2+
3+
### Company/ Project website:
4+
- https://www.connectwise.com/
5+
- https://control.connectwise.com/
6+
- http://www.labtechsoftware.com/it-providers/solutions/remote-monitoring-management
7+
8+
9+
### Historical context and detail
10+
- ConnectWise Control was formerly ScreenConnect
11+
- ConnectWise Automate was formerly LabTech Software/ Continuum Managed
12+
13+
### Process Indicators
14+
-
15+
-
16+
-
17+
18+
### Network Indicators
19+
- myconnectwise.com
20+
- connectwise.com
21+
- hostedrmm.com
22+
- screenconnect.com
23+
- itsupport247.net
24+
-
25+
26+
### File Signature Indicators
27+
- ConnectWise
28+
- CONTINUUM MANAGED
29+
- ScreenConnect
30+
-

‎RMM/DWService/RMM_Summary_DWService.md

+21
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for DWService
2+
3+
### Company/ Project website:
4+
- https://dwservice.net
5+
6+
### Historical context and detail
7+
- Python based solution, all company/ product version information is 'Python'
8+
9+
### Process Indicators
10+
-
11+
-
12+
-
13+
14+
### Network Indicators
15+
- dwservice.net
16+
-
17+
-
18+
19+
### File Signature Indicators
20+
- DWSNET OÜ
21+
-

‎RMM/DameWare/RMM_Summary_DameWare.md

+24
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
# Remote Monitioring and Management (RMM) Tool Summary for DameWare
2+
3+
### Company/ Project website:
4+
- https://www.dameware.com/
5+
6+
7+
### Historical context and detail
8+
- SolarWinds?
9+
10+
### Process Indicators
11+
-
12+
-
13+
-
14+
15+
### Network Indicators
16+
- swi-rc.com
17+
- swi-tc.com
18+
- beanywhere.com
19+
- licenseserver.solarwinds.com
20+
-
21+
22+
### File Signature Indicators
23+
- Dameware
24+
-

0 commit comments

Comments
 (0)