RDP Over Reverse SSH Tunnel

심각도 높음 Sigma 탐지 룰. Detects svchost hosting RDP termsvcs communicating with the loopback address and on TCP port 3389

작성자: Samir Bousseaden · 원본 라이선스: DRL 1.1 · SigmaHQ 원본