Mstsc.EXE Execution With Local RDP File (5fdce3ac-e7f9-4ecd-a3aa-a4d78ebbf0af)
Detects potential RDP connection via Mstsc using a local ".rdp" file
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
Remote Access Software - T1219 (4061e78c-1284-44b4-9116-73e4ac3912f7) | Attack Pattern | Mstsc.EXE Execution With Local RDP File (5fdce3ac-e7f9-4ecd-a3aa-a4d78ebbf0af) | Sigma-Rules | 1 |