4 ms·
A KVM is more likely to trigger a SOC response than leveraging built-in RDP or using Zoom remote desktop.
by alephnerd 2y ago
A KVM is more likely to trigger a SOC response than leveraging built-in RDP or using Zoom remote desktop.
- 0cf8612b2e1e 2y agoSurely a tuned KVM could impersonate a standard input hardware vendor (eg Logitech)?
- alephnerd 2y agoIt would both be very difficult and anomalous enough to be caught by a company's SOC. On the other hand, a long running Zoom session can remain undetected due to it's normality.
- 0cf8612b2e1e 2y agoPeople emulate mice and keyboards from raspberry pis. I do not see why a KVM could not do the same. Or pretend it is a usbc docking station. Generic input devices do not have security keys.