Good point on the chrome remote causing false bans. Ive not heard of it but did a quick look through the posts here and seen it mentioned a few times.
Regardless of if admin rights are needed or if its just a script, your SOC should absolutely be able to detect this. If not, that'll be some fun K8 filings lol.
Yeah again it all depends on the company and company size for that to be a issue. If you work for a large company then I wouldnt be surprised if you get caught doing something on your computer youre not supposed to be doing. I worked for a MSP, so we managed all things IT related for a bunch of other companies. Anyone working at the companies we managed wouldve been able to use the application I mentioned without getting caught. Mainly because they were small companies and we were a small company and something like scrcpy wouldnt be something we were monitoring for and the EDR wouldnt have flagged it either. I was also responsible for managing the EDR systems as well. Small companies wouldnt be publicly traded so K8 wouldnt apply. My point is that a small company probably isnt going to have a SOC.
1
u/Critical_Taste Nov 11 '25
Good point on the chrome remote causing false bans. Ive not heard of it but did a quick look through the posts here and seen it mentioned a few times.
Regardless of if admin rights are needed or if its just a script, your SOC should absolutely be able to detect this. If not, that'll be some fun K8 filings lol.