rdp-traffic
April 24, 2024 · View on GitHub
Description
A representation of a single RDP packet
Parameters
| Parameter | Value |
|---|---|
| Subject | rdp |
| Activity | traffic |
| Activity Type | rdp-traffic |
| Pretty Name | Rdp Traffic |
Legacy Names
| Success | Fail |
|---|---|
| remote-logon |
Fields
The possible fields for this activity type will vary depending on whether the activity was a success or a fail.
rdp-traffic:success
| Field | Core | Detection | Informational |
|---|---|---|---|
| tgs_service_name | ✓ |
A failure activity is not currently supported for this activity-type.