External Remote RDP Logon from Public IP — Detection Rule
Detects successful logon from public IP address via RDP. This can indicate a publicly-exposed RDP port.
Detects successful logon from public IP address via RDP. This can indicate a publicly-exposed RDP port.