RDP logon to domain-joined server via remote interactive session

Duo Tech@duotech

•updated Jul 15, 2026•10•0•15

Detects Remote Interactive RDP logon events targeting systems identified as servers or critical infrastructure, using the DeviceLogonEvents data source.