{
  "Name": "Rocket Remote Desktop",
  "Category": "RMM",
  "Description": "Rocket Remote Desktop is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2024-08-02",
  "Details": {
    "Website": "https://www.rocketsoftware.com/en-us/products/remote-desktop",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [
      "Windows"
    ],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "RDConsole.exe",
      "RocketRemoteDesktop_Setup.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": []
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rocket_remote_desktop_processes_sigma.yml",
      "Description": "Detects potential processes activity of Rocket Remote Desktop RMM tool"
    }
  ],
  "References": [],
  "Acknowledgement": [],
  "CodeSigning": {
    "certificates": [
      {
        "signer_name": "Rocket Software, Inc.",
        "certificate_thumbprint": "13FDCE37AA7B96441374012A9BE4A065C826F87F",
        "certificate_der_base64": "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",
        "src_file_sha256": "a06ed00b1f3ae4a4dafe15d3e2d4a49ca2aa3e44c92cff8ac4a39b4c32760444",
        "src_file_path": "downloaded_files/rocket_remote_desktop/a06ed00b1f3ae4a4dafe15d3e2d4a49ca2aa3e44c92cff8ac4a39b4c32760444",
        "src_file_company": "Rocket Software Inc."
      },
      {
        "signer_name": "Rocket Software, Inc.",
        "certificate_thumbprint": "48C97F61CA860422533CD8953EAE30B89B21F782",
        "certificate_der_base64": "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",
        "src_file_sha256": "b77b82b349b1ae194aef5a41ead566451267f24b5bdd1d4b8a08d2b434cb2837",
        "src_file_path": "downloaded_files/rocket_remote_desktop/b77b82b349b1ae194aef5a41ead566451267f24b5bdd1d4b8a08d2b434cb2837",
        "src_file_company": "Rocket Software Inc."
      }
    ]
  }
}