Windows VNC Application Usage
The rule detects VNC (Virtual Network Computing) application usage on Windows systems, looking for specific indicators in conjunction. This combination suggests active VNC communication, potentially indicating lateral movement or unauthorized remote access, particularly in environments where VNC is not standard for enterprise use.
Sigma
