⌕
Showing 15 of 15 events
Cross-channel reference for Remote Desktop Protocol forensic analysis. Covers Security.evtx, TerminalServices-RemoteConnectionManager, TerminalServices-LocalSessionManager, and RDPCoreTS operational logs.
Curated highest-signal Sigma-style detection rules for RDP Event Reference activity, based on patterns from SigmaHQ/sigma. Click any Event ID chip to jump to that event in the reference tab.
Convert to your SIEM: sigconverter.io