teamviewer_out_to_inside

Explanation

The teamviewer_out_to_inside NDM is designed to detect TeamViewer scanning that is hitting the customer’s network from the Internet. TeamViewer is a remote access software application that supports a variety of operating systems.

What to Look For

Scanning activity on the Internet is quite commonplace. Under normal circumstances, TeamViewer should not be exposed to the open Internet.

Related MITRE ATT&CK Categories

Network Service Discovery

Active Scanning