Docs update

docs/docs/3rdparty_anydesk.md

@@ -25,7 +25,6 @@ Add a URL Action</br>
 anydesk:{{agent.AnyNetID}}
 ```
 
-
 Navigate to an agent with AnyDesk running (or apply using **Settings > Automation Manager**).</br>
 Go to Tasks.</br>
 Add Task</br>

docs/docs/3rdparty_teamviewer.md

@@ -25,7 +25,6 @@ Add a URL Action</br>
 https://start.teamviewer.com/device/{{agent.TeamViewerClientID}}/authorization/password/mode/control
 ```
 
-
 Navigate to an agent with TeamViewer running (or apply using **Settings > Automation Manager**).</br>
 Go to Tasks.</br>
 Add Task</br>

docs/docs/faq.md

@@ -40,4 +40,30 @@ cd /meshcentral/
 sudo systemctl stop meshcentral
 node node_modules/meshcentral --resetaccount <username> --pass <newpassword>
 sudo systemctl start meshcentral
-```
+```
+
+#### Help! I've been hacked there are weird agents appearing in my Tactical RMM
+
+No, you haven't. 
+
+1. Your installer was scanned by an antivirus. 
+
+2. It didn't recognize the exe. 
+
+3. You have the option enabled to submit unknown applications for analysis. 
+
+![AV Option1](images/faq_av_option1.png)
+
+4. They ran it against their virtualization testing cluster. 
+
+5. You allow anyone to connect to your rmm server (you should look into techniques to hide your server from the internet). 
+
+6. Here are some examples of what that looks like.
+
+![AV Sandbox1](images/faq_av_sandbox1.png)
+
+![AV Sandbox1](images/faq_av_sandbox2.png)
+
+![AV Sandbox1](images/faq_av_sandbox3.png)
+
+![AV Sandbox1](images/faq_av_sandbox4.png)