Remote Desktop AppAware tools
Henry Huang
Can we add more tools to the "remote desktop" AppAware library. Right now, we do have a bunch of other tools that we would like to block, such as splashtop, teamviewer, etc, but it's odd that only one app is listed as an option.
Created by Brian
Brian Williams
I add Zoho Assist, Atera, SuperOps, Syncro, SoftEther VPN, Ammyy Admin, DWAgent, HopToDesk, RustDesk, Supremo as well.
Bobby King
One of our clients had a successful social engineering attack that used the Microsoft QuickAssist app to allow a malicious actor to do a few things. That were stopped pretty quickly with no exfiltration of data, for those of you keeping score.
Having this feature would be great at preventing attacks like these. We would allow DNS resolution only for the apps we actually support and block the rest. Chrome Remote Desktop is one that is easily installed, along with many of the others.
E
Eli B
To note if including screen connect we would need a way to exclude an instance