name: remote_access_software date: 2025-04-04 version: 4 id: f3b92ff9-667c-481f-b29d-458e10d48508 author: Splunk Threat Research Team lookup_type: csv description: A list of Remote Access Software match_type: - WILDCARD(remote_utility) - WILDCARD(remote_domain) - WILDCARD(remote_utility_fileinfo) min_matches: 1 max_matches: 1 case_sensitive_match: false