avatar

Larry Igbakpa

@Yoma
0 followers0 downloads7 copies0 likes100 views

1 detection

Detects the execution of Remote Desktop Protocol (RDP) client (mstsc.exe) with an .rdp configuration file, specifically when the .rdp file is launched from common Outlook attachment or temporary internet file directories. This behavior can indicate a user being tricked into opening a malicious RDP file delivered via email, potentially leading to remote access to an attacker-controlled system or a compromised internal host.
avatar
Larry Igbakpa@Yoma
avatar
Detections.ai Community
7 months ago
70100