Welcome back to my blog today I’m going to be going over something I haven’t worked on since I was messing around on TryHackMe for my initial training with Atomic Red Team.
As of right now at my current position most of the team is comprised of standard helpdesk employees and I was hoping I could bridge the gap between security and helpdesk and hopefully get someone interested into security.
I wanted to start this off by saying I had never heard of mesh agent previously up until this point. Essentially it is an Open Source RMM tool with a 2010 style UI. It allows for capabilities that many other RMM tools offer which can be used for legitmate purposes aswell as malicious ones.
This post we’re going to go into the attack lifecycle of the attack some lessons learned and key points regarding the initial compromise.