Suspicious RDP Redirect Using TSCON

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•1

Detects a suspicious RDP session redirect using tscon.exe