From 77553e11e83a73d30d17aebf148752f2dec33ff7 Mon Sep 17 00:00:00 2001 From: Florian Roth Date: Tue, 30 Jun 2020 10:03:00 +0200 Subject: [PATCH] Update win_not_allowed_rdp_access.yml --- rules/windows/builtin/win_not_allowed_rdp_access.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/windows/builtin/win_not_allowed_rdp_access.yml b/rules/windows/builtin/win_not_allowed_rdp_access.yml index 8ec3cd2f9..da63b4b5a 100644 --- a/rules/windows/builtin/win_not_allowed_rdp_access.yml +++ b/rules/windows/builtin/win_not_allowed_rdp_access.yml @@ -1,4 +1,4 @@ -title: A User Was Denied The Access To Remote Desktop +title: Denied Access To Remote Desktop id: 8e5c03fa-b7f0-11ea-b242-07e0576828d9 description: This event is generated when an authenticated user who is not allowed to log on remotely attempts to connect to this computer through Remote Desktop. Often, this event can be generated by attackers when searching for available windows servers in the network.