Showing 1–3 of 3 articles
Keep a list of the remote admin tools you allow
A legitimate support tool still creates an access path. Record the tool, managed systems, operators, authentication, session records, and how access is removed.
Read the visual guide
Who should have administrator rights on a work laptop
Administrator access changes what software can do to a device. Limit routine privilege while giving staff a clear, workable route for approved installation and support.
Read the visual guide
Living-off-the-land activity: spot misuse of legitimate tools
A familiar administration tool can be part of an intrusion. Judge its execution by the account, parent process, command context, destination, and business reason.
Read the visual guide