Outbound RDP Connections Over Non-Standard Tools

심각도 높음 Sigma 탐지 룰. Detects Non-Standard tools initiating a connection over port 3389 indicating possible lateral movement. An initial baseline is required befo…

관련 CVE: CVE-2019-0708

작성자: Markus Neis · 원본 라이선스: DRL 1.1 · SigmaHQ 원본