Atera
Named by 13 kept items in this workspace.
7 items name it under tools, 4 under affected products and 2 under classification.technologies.
Search every workspace for Atera. It matches the name as written, so it can find other things that share it.
The items that name it 13
Example of an RMM tool that should be blocked or produce high-confidence alerts if not an organization's approved remote-management product.
Remote monitoring and management tool downloaded via standard Atera support link after Netbird was established, in one case.
Added to v2 RMM scan list.
Legitimate RMM tool cited as previously abused by adversaries
Remote management tool installed via malicious MSI (setup.msi) for persistence
Listed among applications commonly abused to deploy the ScreenConnect Client.
RMM tool; cited as commonly abused and linked to ransomware cases
RMM tool listed among top abused remote access tools.
Legitimate RMM agent the attacker attempted to deploy post-exploitation via the backdoor; installation could not be run silently and triggered a medium EDR alert
RMM tool compromised by threat actor to gain access to MSP's downstream customers
All technologies in this workspace.