rdp2tcp Tool Execution Correlated with rdp2tcp Virtual Channel

Arnold Chan@slaz

•updated 23 days ago•0•0•1

Detects the execution of the rdp2tcp tunneling tool in conjunction with RDP virtual channel activity using the 'rdp2tcp' channel name. This combination is a strong indicator of RDP-based protocol tunneling.