Cheat Sheet Hunting RDP Activities

Here’s a quick Cheat Sheet for hunting RDP connections on a machine or a DC. Please

This information does not cover all the scenarios that can be encountered during a forensic investigation. The different time periods have been chosen arbitrarily to structure my mindset. They do not always correspond to reality. Here’s the download link: Cheat Sheet Hunting RDP Activities.pdf