Detection rules › By event

ScreenConnect

Event	Rules
Event ID 200	1
Event ID 201	1

Event ID 200

1 detection rules reference this event. View event page.

Sigma (1)

Remote Access Tool - ScreenConnect Command Execution severity low T1059, T1059.003

Event ID 201

1 detection rules reference this event. View event page.

Sigma (1)

Remote Access Tool - ScreenConnect File Transfer severity low T1059, T1059.003