DFIR & Incident Response2021.10.22RDP Authentication Artifacts for DFIR PurposeA good detection technique to spot Remote Desktop Connections that are exposed to the internet is to scan RDP event logs for…READ ARTICLE ↗