Rule Info
Name
.RDP File Created By Uncommon Application
Author
Nasreddine Bencherchali (Nextron Systems)
Description
Detects creation of a file with an ".rdp" extension by an application that doesn't commonly create such files.
Date
2023-04-18 00:00:00
Modified
2024-11-01 00:00:00
Id
fccfb43e-09a7-4bd2-8b37-a5a7df33386d
Tags
attack.stealth
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Nasreddine Bencherchali
Merge PR #5966 from @nasbench - Update mitre tags to use attack v19
2026-04-29
Florian Roth
Merge PR #5063 from @Neo23x0 - Add & Update rules related to the suspicious creation of ".rdp" files
2024-11-01
Nasreddine Bencherchali
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12
Fukusuke Takahashi
Merge PR #4958 from @fukusuket - Update unreachable/broken references
2024-08-10
github-actions[bot]
Merge PR #4745 from @nasbench - Promote older rules status from `experimental` to `test`
2024-03-01
Scan your endpoints, forensic images or collected files with our portable scanner THOR