High Volume DC RPC Connections (CVE-2026-41089)

Ethan Andrews@eandrews

•updated Jun 2, 2026•23•0•85

Detects high volumes of network connections directed at Domain Controller RPC and authentication ports from a single source. This may indicate reachability testing, scanning, or exploitation attempts associated with CVE-2026-41089 (Netlogon RCE).