I have a Windows 10 PC that may be infected with malware, possibly with a Trojan. Various scans with antivirus programs and extensive analysis have not yet delivered a conclusive result.
So far, it is known that the malware is already becoming active and doing its malware thing before/without any user being logged in.
I have pulled the disk from the compromized PC and have booted it on another, sandboxed system in order to analyze it. AM currently monitoring its network traffic with Wireshark.
What tool could I use to monitor the PC via LAN or Wi-Fi and record any actions that take place on that PC, like start of executables, network access and the like?
Would this be possible with Remote Desktop Manager for example?
Grateful for tips or experience what best to use here.