Potential Remote Desktop Connection to Non-Domain Host

SigmaHQ Detections@sigmaHQ

•updated Nov 24, 2025•0•0•2

Detects logons using NTLM to hosts that are potentially not part of the domain.