Quick Assist is a remote assistance tool primarily for Microsoft Windows, although a macOS version also exists. Quick Assist allows for remote screen sharing and, with end user approval, remote control and command execution on the enabling device.
| Technique | Procedure example |
|---|---|
| T1071.001 Web Protocols |
Quick Assist communicates over TCP 443 via HTTPS to a remote session server, under which RDP traffic is transferred. |
| T1113 Screen Capture |
Quick Assist allows for the remote administrator to take screenshots of the running system. |
| T1125 Video Capture |
Quick Assist allows for the remote administrator to view the interactive session of the running machine, including full screen activity. |
None recorded.
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
