Rule Info
Name
Allow RDP Remote Assistance Feature
Author
frack113
Description
Detect enable rdp feature to allow specific user to rdp connect on the targeted machine
Date
2022-08-19 00:00:00
Modified
2023-08-17 00:00:00
Id
37b437cf-3fc5-4c8e-9c94-1d7c9aff842b
Tags
attack.defense_evasion attack.t1112 DEMO
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Scan your endpoints, forensic images or collected files with our portable scanner THOR