Skip to content

Hide Navigation Hide TOC

Default RDP Port Changed to Non Standard Port (509e84b9-a71a-40e0-834f-05470369bd1e)

Detects changes to the default RDP port. Remote desktop is a common feature in operating systems. It allows a user to log into a remote system using an interactive session with a graphical user interface. Microsoft refers to its implementation of the Remote Desktop Protocol (RDP) as Remote Desktop Services (RDS).

Cluster A Galaxy A Cluster B Galaxy B Level
Default RDP Port Changed to Non Standard Port (509e84b9-a71a-40e0-834f-05470369bd1e) Sigma-Rules Port Monitors - T1547.010 (43881e51-ac74-445b-b4c6-f9f9e9bf23fe) Attack Pattern 1
Boot or Logon Autostart Execution - T1547 (1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf) Attack Pattern Port Monitors - T1547.010 (43881e51-ac74-445b-b4c6-f9f9e9bf23fe) Attack Pattern 2