RMMmax

RMMmax artifacts

Apps
2 paths
activity.logrmmmax_*.ps1
Version 1
Paul Cabon CERT Almond

Paths on disk

2 paths

References

1 link

github.com/magicsword-io/LOLRMM/blob/main/yaml/rmmmax.yaml(opens in new tab)

Collect it

KAPE command line for RMMmax

Source

Destination

--vss--vhdx

kape.exe --tsource C: --tdest D:\Evidence --target RMMmax

Run with administrator privileges. KAPE Documentation

Part of these collections

3 collections collect this target

Decode with CyberChef

1 recipe for this artifact

Unicode DecodeDecode Unicode escape sequences(opens in new tab)