New Remote Desktop Connection Initiated Via Mstsc.EXE

심각도 보통 Sigma 탐지 룰. Detects the usage of "mstsc.exe" with the "/v" flag to initiate a connection to a remote server. Adversaries may use valid accounts to log i…

작성자: frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본