Publicly Accessible RDP Service

SigmaHQ Detections@sigmaHQ

•updated Jun 4, 2025•0•0•1

Detects connections from routable IPs to an RDP listener. Which is indicative of a publicly-accessible RDP service.