SentinelOne VS P2P Remote Desktop (aka P2P RD) – Detection and Forensics

Threat actors often employ various methods to remotely control compromised systems. One widespread technique involves repurposing Commercial Off the Shelf (COTS) tools, initially designed for legitimate use, such as TeamViewer, VNC, and ConnectWise. These tools have been frequently observed in multi-stage cyberattacks. However, repurposed tools have become less appealing to threat actors due to their […]