Merge pull request #153 from dfirtnt/master

Additional exe process name for Level RMM
redcanaryco · Sep 19, 2023 · 6f232de · 6f232de
2 parents c025755 + 96b584a
commit 6f232de
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/definitions/remote-admin.json b/definitions/remote-admin.json
@@ -183,7 +183,8 @@
         "domain": ["*.level.io"],
         "digsig_publisher": ["Level Software, Inc."],
         "process_name": ["level-windows-amd64.exe",
-                        "level.exe"]
+                        "level.exe",
+	                "level-remote-control-ffmpeg.exe"]
     },
     "FixMe": {
         "domain": ["fixme.it"],