Outbound RDP Connections Over Non-Standard Tools (ed74fe75-7594-4b4b-ae38-e38e3fd2eb23)
Detects Non-Standard tools initiating a connection over port 3389 indicating possible lateral movement. An initial baseline is required before using this utility to exclude third party RDP tooling that you might use.