I read a recent security report about attackers abusing legitimate MSP360 remote-management software to establish persistence and then deploying ScreenConnect as a second remote-access tool. It made me…
I read about attackers abusing legitimate MSP360 remote-management software to maintain access and then deploying ScreenConnect as a second remote-access tool. That got me thinking about how organizations…
We have several clients who need approved vendors to connect through ScreenConnect, but we don't want the agent reaching unauthorized ScreenConnect instances or sites. What are you using…
Has anyone else seen Dell.TechHub.exe repeatedly trigger behavioral ransomware detections? The process creates seemingly random .rbf files and interacts with services.exe. Its file hash appears clean in reputation…
I've been seeing more ClickFix attacks where a fake CAPTCHA or verification page tricks someone into opening Run, PowerShell, or Terminal and pasting in a command. That seems…
ClickFix attacks use fake CAPTCHA or verification pages to persuade users to open Run, PowerShell, or Terminal and paste commands themselves. That makes traditional advice about avoiding suspicious…
I'm the sole day-to-day IT person at a growing SaaS company with around 80 employees, although our CTO and another colleague can help during emergencies. We recently upgraded…
We subscribe to several paid threat intelligence feeds marketed as operational and actionable. Most deliver long reports or blog-style analysis, sometimes with STIX bundles or CSV files containing…
I'm looking for endpoint detection and response software for my own desktop and laptop. I considered CrowdStrike Falcon Pro, but it appears to be available only to business…
I'm looking to execute a PowerShell script (.ps1) without having the terminal window flash on screen at all. I've tried the -WindowStyle Hidden option, but it still briefly…
I'm looking for recommendations on antivirus and endpoint detection and response (EDR) solutions that can run on older systems, specifically Windows Server 2012 and 2008. We've suggested upgrading…
I'm currently using SentinelOne as our main endpoint detection and response (EDR) solution. I've heard that ESET has a really strong static detection engine, and I'm wondering if…
Hey folks, we're a small IT team of three managing endpoints for a mid-size company. Our current ESET EDR license is coming up for renewal, and we're debating…
I'm currently exploring remote monitoring and management (RMM) tools and have narrowed it down to Datto RMM and N-able. I've been a consultant for years and find Datto…
We're currently using Windows Defender as our primary antivirus solution and we have a mix of Business Premium and a few E3 licenses. We're not paying for the…
I've been using SentinelOne for a couple of years, and while I'm quite satisfied with its performance as an Endpoint Detection and Response (EDR) tool, I'm running into…