Find remote access tools you did not install.
Neo checks each device's installed software against LOLRMM's catalog of abused remote access tools.
What Neo does with LOLRMM.
Remote access tool catalog
Neo reads about 360 RMM and remote access tools that attackers abuse.
Software inventory check
Neo matches the RMM's installed software to the catalog by name and folder.
Indicators to hunt
Neo reads each tool's domains, executables, paths and Sigma detections.
Concrete work Neo handles in LOLRMM.
Remote access tool report
A scheduled agent lists each customer's devices with remote tools you did not approve.
Check a device on a ticket
An agent notes on a security ticket which remote access tools the device runs.
Investigate an alert
An agent reads a tool's domains, paths and executables for an alert on it.
Set it up with Neo.
Connect LOLRMM
Enter the credentials the LOLRMM card on Neo's Integrations page asks for. The setup guide shows where to find each one.
Start from a use case
Open the LOLRMM card's "What Neo can do" tab and press Set up with Neo on the job you want.
Build it with Neo Support
Neo Support picks the tools and the LOLRMM access the job needs, and builds the agent with you.
Questions about the LOLRMM integration.
What does Neo need to connect to LOLRMM?+
The credentials the LOLRMM card on Neo's Integrations page asks for, from your LOLRMM account. The setup guide shows where to find each one.
How do I set up one of these use cases?+
Connect LOLRMM, open its "What Neo can do" tab in the Neo dashboard and press Set up with Neo on the use case. Neo Support builds the agent with you.