RDP Sessions Hunting

RDPCacheHunting · #CFD0D0

Details

ID	`RDP Sessions Hunting`
Version	-1
From Version	6.9.0
Playbook	RDP Bitmap Cache - Detect and Hunt
Auto-run	Yes
Disabled	No
Read Only	No
Default	No

Source

incidenttype-RDP_Sessions_Hunting.json

Download History Raw

{
    "autorun": true,
    "color": "#CFD0D0",
    "days": 0,
    "daysR": 0,
    "default": false,
    "detached": false,
    "disabled": false,
    "extractSettings": {
        "fieldCliNameToExtractSettings": {},
        "mode": "All"
    },
    "hours": 0,
    "hoursR": 0,
    "id": "RDP Sessions Hunting",
    "layout": "RDP Sessions",
    "locked": false,
    "name": "RDP Sessions Hunting",
    "onChangeRepAlg": 0,
    "playbookId": "RDP Bitmap Cache - Detect and Hunt",
    "readonly": false,
    "reputationCalc": 0,
    "system": false,
    "version": -1,
    "weeks": 0,
    "weeksR": 0,
    "fromVersion": "6.9.0"
}