All Detections

RDP shadow session started (native)

SIGMA Detection Rules@SIGMADetectionRules
updated Sep 6, 20252014

Detects scenarios where an attacker has initiated a RDP shadow session.

Sigma