.. /Microsoft Quick Assist
Star

Author: Microsoft
Website: https://learn.microsoft.com/en-us/windows/client-management/client-tools/quick-assist

Microsoft Quick Assist is a remote desktop tool. It communicates over port 443 (https) and connects to the Remote Assistance Service at https://remoteassistance.support.services.microsoft.com by using the Remote Desktop Protocol (RDP). The traffic is encrypted with TLS 1.2.

Artifacts

Windows

Privileges: User
Path(s):

%WINDIR%\system32\quickassist.exe

Domains

remoteassistance.support.services.microsoft.com

Ports

Remediation

Blocking remoteassistance.support.services.microsoft.com prevents Quick Assist connections.

Resources

https://learn.microsoft.com/en-us/windows/client-management/client-tools/quick-assist#disable-quick-assist-within-your-organization