From 66889be8a69045a01c894057ebf810ecc6ac343f Mon Sep 17 00:00:00 2001 From: sventec Date: Fri, 4 Apr 2025 11:20:21 -0400 Subject: [PATCH 1/3] fix: remote_utility typo in remote_access_software.csv --- lookups/remote_access_software.csv | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lookups/remote_access_software.csv b/lookups/remote_access_software.csv index 0b36b67253..0bf03b4e43 100644 --- a/lookups/remote_access_software.csv +++ b/lookups/remote_access_software.csv @@ -61,7 +61,7 @@ Netviewer (GoToMeet),,nvClient.exe,Algorius*,netviewer,TRUE,RMM,Obsolute - found Netviewer (GoToMeet),,netviewer.exe,,,TRUE,RMM,Obsolute - found copy here: https://www.enviolet.com/en/service/online-consultant.html,2/9/2024 ngrok,user_managed,ngrok.exe,,,TRUE,Developer Utility,https://ngrok.com/docs/guides/running-behind-firewalls/,2/9/2024 NinjaRMM,*.ninjaone.com,ninjarmmagent.exe,NinjaRMM*,,TRUE,RMM,https://www.ninjaone.com/faq/,2/9/2024 -NinjaRMM,*.ninjarmm.com,NinjaRMMAgenPatcher.exe,Ninja MSP*,,TRUE,RMM,https://www.ninjaone.com/faq/,2/9/2024 +NinjaRMM,*.ninjarmm.com,NinjaRMMAgentPatcher.exe,Ninja MSP*,,TRUE,RMM,https://www.ninjaone.com/faq/,4/4/2025 NoMachine,user_managed,nomachine*.exe,NoMachine*,nomachine,TRUE,RMM,https://kb.nomachine.com/AR04S01122,2/9/2024 NoMachine,,nxservice*.ese,,,TRUE,RMM,https://kb.nomachine.com/AR04S01122,2/9/2024 NoMachine,,nxd.exe,,,TRUE,RMM,https://kb.nomachine.com/AR04S01122,2/9/2024 From 5f1d8f6b3f6d8a2423d47263b5a91a951976d6d7 Mon Sep 17 00:00:00 2001 From: sventec <18218761+sventec@users.noreply.github.com> Date: Fri, 4 Apr 2025 11:32:32 -0400 Subject: [PATCH 2/3] fix: addtl remote_utility typo in remote_access_software.csv --- lookups/remote_access_software.csv | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lookups/remote_access_software.csv b/lookups/remote_access_software.csv index 0bf03b4e43..f8b8619427 100644 --- a/lookups/remote_access_software.csv +++ b/lookups/remote_access_software.csv @@ -63,7 +63,7 @@ ngrok,user_managed,ngrok.exe,,,TRUE,Developer Utility,https://ngrok.com/docs/gui NinjaRMM,*.ninjaone.com,ninjarmmagent.exe,NinjaRMM*,,TRUE,RMM,https://www.ninjaone.com/faq/,2/9/2024 NinjaRMM,*.ninjarmm.com,NinjaRMMAgentPatcher.exe,Ninja MSP*,,TRUE,RMM,https://www.ninjaone.com/faq/,4/4/2025 NoMachine,user_managed,nomachine*.exe,NoMachine*,nomachine,TRUE,RMM,https://kb.nomachine.com/AR04S01122,2/9/2024 -NoMachine,,nxservice*.ese,,,TRUE,RMM,https://kb.nomachine.com/AR04S01122,2/9/2024 +NoMachine,,nxservice*.exe,,,TRUE,RMM,https://kb.nomachine.com/AR04S01122,4/4/2025 NoMachine,,nxd.exe,,,TRUE,RMM,https://kb.nomachine.com/AR04S01122,2/9/2024 OCS inventory,user_managed,ocsinventory.exe,Ocs Inventory*,,TRUE,RMM,https://ocsinventory-ng.org/?page_id=878&lang=en,2/9/2024 OCS inventory,,ocsservice.exe,OcsPackager*,,TRUE,RMM,https://ocsinventory-ng.org/?page_id=878&lang=en,2/9/2024 From 889c08ebbf1b207c47fe8a340f29a999ac94dd60 Mon Sep 17 00:00:00 2001 From: sventec <18218761+sventec@users.noreply.github.com> Date: Fri, 4 Apr 2025 11:32:45 -0400 Subject: [PATCH 3/3] chore: update lookup date and version --- lookups/remote_access_software.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lookups/remote_access_software.yml b/lookups/remote_access_software.yml index ad4f0abcb8..9a1fd9e997 100644 --- a/lookups/remote_access_software.yml +++ b/lookups/remote_access_software.yml @@ -1,6 +1,6 @@ name: remote_access_software -date: 2025-02-10 -version: 3 +date: 2025-04-04 +version: 4 id: f3b92ff9-667c-481f-b29d-458e10d48508 author: Splunk Threat Research Team lookup_type: csv