RDP Connection Allowed Via Netsh.EXE

심각도 높음 Sigma 탐지 룰. Detects usage of the netsh command to open and allow connections to port 3389 (RDP). As seen used by Sarwent Malware

작성자: Sander Wiebing · 원본 라이선스: DRL 1.1 · SigmaHQ 원본