LOLRMMTHE REMOTE ACCESS CATALOG
GitHub
Catalog / Quest KACE Agent (formerly Dell KACE)
RMM

Quest KACE Agent (formerly Dell KACE)

Quest KACE Agent (formerly Dell KACE) is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.

Visit tool website ↗Download JSON ↓View source YAML ↗Suggest an update ↗

Tool overview

Category
RMM
Research authors
Not recorded
Created
2024-08-02
Last modified
2025-12-14
Privileges
Not recorded
Free / availability
Not recorded
Verification required
Not recorded
Supported platforms
Not recorded

Executables & installation paths

Filename
Not recorded
OriginalFileName
Not recorded
Description
Not recorded

Installation paths

konea.exe

Code signing

signer name
Quest Software Inc.
certificate thumbprint
41D7B56D7E8A181A954AA35A3A0FDF178FAAE01A
tbs sha256
C7638A5AF56C9F4AE902251705B2E370E209E7A9218605628995AD73469E0F53
tbs sha1
Not recorded
signer name
Quest Software Inc.
certificate thumbprint
B7DF1291422B3186EE44BFF040931D8788DB63E6
src file sha256
850a4c24055afc7d293232f250f8ec7cc4bb6971f2fe159512427196e96720eb
src file path
downloaded_files/quest_kace_agent_(formerly_dell_kace)/850a4c24055afc7d293232f250f8ec7cc4bb6971f2fe159512427196e96720eb
src file company
Quest Software Inc.

search names

company names

signer names

Quest Software Inc.

FORENSIC EVIDENCE

Network artifacts

Description
Known remote domains
Domains
  • *.kace.com
Ports
Not recorded

Detections

Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/quest_kace_agent__formerly_dell_kace__network_sigma.yml
Description
Detects potential network activity of Quest KACE Agent (formerly Dell KACE) RMM tool
Sigma
https://github.com/magicsword-io/LOLRMM/blob/main/detections/sigma/quest_kace_agent__formerly_dell_kace__processes_sigma.yml
Description
Detects potential processes activity of Quest KACE Agent (formerly Dell KACE) RMM tool

References