AppAware: RDP
Pedro Mario
Request is to add RDP app to AppAware
Minetta Gould
Merged in a post:
AppAware: Remote Desktop
Wolf
Consider these remote desktop applications for AppAware:
- Splashtop
- Acronis Quick Assist
Minetta Gould
Merged in a post:
Remote Desktop AppAware tools
Henry Huang
Can we add more tools to the "remote desktop" AppAware library. Right now, we do have a bunch of other tools that we would like to block, such as splashtop, teamviewer, etc, but it's odd that only one app is listed as an option.
Jonathan Bullock
It's be nice to have this for RMM tools like Connect Wise since it's been used by hackers frequently in addition to Ninja, Datto, Kaseya, Acronis, Atera, Go-To, Bombgar
Brian Williams
I add Zoho Assist, Atera, SuperOps, Syncro, SoftEther VPN, Ammyy Admin, DWAgent, HopToDesk, RustDesk, Supremo as well.
Bobby King
One of our clients had a successful social engineering attack that used the Microsoft QuickAssist app to allow a malicious actor to do a few things. That were stopped pretty quickly with no exfiltration of data, for those of you keeping score.
Having this feature would be great at preventing attacks like these. We would allow DNS resolution only for the apps we actually support and block the rest. Chrome Remote Desktop is one that is easily installed, along with many of the others.
E
Eli B
To note if including screen connect we would need a way to exclude an instance
Nick Saunders
Merged in a post:
Add More Remote Desktop Tools to AppAware
Brian Zick
It would be helpful to see more remote desktop tools, especially those often used by threat actors like AnyDesk and TeamViewer, added as applications in AppAware.
Derek Gabriel
RDP wouldn't be something you can easily determine by its DNS queries; often, RDP skips DNS altogether when connecting by IP. They could identify services using RDP, like Windows 365, that always use the same domains to initiate connections.