{
  "Name": "RPort",
  "Category": "RMM",
  "Description": "RPort is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.",
  "Author": "",
  "Created": "2024-08-02",
  "LastModified": "2024-08-02",
  "Details": {
    "Website": "https://kb.rport.io/",
    "PEMetadata": {
      "Filename": "",
      "OriginalFileName": "",
      "Description": ""
    },
    "Privileges": "",
    "Free": "",
    "Verification": "",
    "SupportedOS": [],
    "Capabilities": [],
    "Vulnerabilities": [],
    "InstallationPaths": [
      "rport.exe"
    ]
  },
  "Artifacts": {
    "Disk": [],
    "EventLog": [],
    "Registry": [],
    "Network": [
      {
        "Description": "Known remote domains",
        "Domains": [
          "user_managed",
          "rport.io"
        ],
        "Ports": []
      }
    ]
  },
  "Detections": [
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rport_network_sigma.yml",
      "Description": "Detects potential network activity of RPort RMM tool"
    },
    {
      "Sigma": "https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/rport_processes_sigma.yml",
      "Description": "Detects potential processes activity of RPort RMM tool"
    }
  ],
  "References": [
    "https://kb.rport.io/using-the-remote-access"
  ],
  "Acknowledgement": [],
  "CodeSigning": {
    "certificates": [
      {
        "signer_name": "RealVNC Ltd",
        "certificate_thumbprint": "58DDE0EC787718FB68974FC2A9391F56B7083D56",
        "certificate_der_base64": "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",
        "src_file_sha256": "ab62e9e2d06330073f44c019d226c8dfe81f68afe25063866c9ce504a1ba7ace",
        "src_file_path": "downloaded_files/rport/ab62e9e2d06330073f44c019d226c8dfe81f68afe25063866c9ce504a1ba7ace",
        "src_file_company": "RealVNC Ltd."
      }
    ]
  }
}