1. Symantec-Broadcom-Horizontal/
  2. Security Response/
  3. Attack Signatures/
  4. Audit: Possible RDP Scan Attempt

Audit: Possible RDP Scan Attempt

Severity: Low

This attack poses a minor threat. Corrective action may not be possible or is not required.

Description

This signature detects multiple outbound RDP (Remote Desktop Protocol) connection attempts.

Additional Information

This is an AUDIT signature that detects multiple outbound RDP (Remote Desktop Protocol) connection attempts from a computer. These RDP connections could indicate the use of a scanning tool or an attempt to brute-force the credentials on remote computers. If this is unexpected activity, an administrator should investigate.

Affected

  • Various Windows platforms.

Response


  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube