This attack poses a minor threat. Corrective action may not be possible or is not required.
This signature detects multiple outbound RDP (Remote Desktop Protocol) connection attempts.
This is an AUDIT signature that detects multiple outbound RDP (Remote Desktop Protocol) connection attempts from a computer. These RDP connections could indicate the use of a scanning tool or an attempt to brute-force the credentials on remote computers. If this is unexpected activity, an administrator should investigate.
- Various Windows platforms.