SUSP RDP File RemoteApp ResourceRedir 1
Detects RDP configuration files (.rdp) that enable malicious RemoteApp features and extensive resource redirection, commonly abused in 'Rogue RDP' campaigns for espionage and data exfiltration.
YARA

Detects RDP configuration files (.rdp) that enable malicious RemoteApp features and extensive resource redirection, commonly abused in 'Rogue RDP' campaigns for espionage and data exfiltration.

Already have an account?