Enable RDP Remote Assistance Feature

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•14

Detects when the 'fAllowToGetHelp' registry value is set to 1, which enables the Remote Assistance feature on a Windows machine. This allows a specific user to establish an RDP connection for remote assistance.