RES Automation Manager

RES Automation Manager is a remote monitoring and management (RMM) tool. More information will be added as it becomes available.

Details

Author: --
Category: --
Created: --
Last Modified: 2/9/2024

Website: --
Privileges: --
Pricing: Unknown
Verification

Installation Paths

wisshell*.exe
wmc.exe
wmc_deployer.exe
wmcsvc.exe

Forensic Artifacts

Network Artifacts


Description	Domains	Ports
Known remote domains	`user_managedivanti.com/`

Detections

Detects potential network activity of RES Automation Manager RMM tool
- Sigma Rule (opens in a new tab)
Detects potential processes activity of RES Automation Manager RMM tool
- Sigma Rule (opens in a new tab)

References

https://forums.ivanti.com/s/article/INFO-Which-ports-does-Ivanti-Automation-use?language=en_US&ui-force-components-controllers-recordGlobalValueProvider.RecordGvp.getRecord=1 (opens in a new tab)

Remoteview Rocket Remote Desktop