Blog Labs References

Detection rules › By event

Microsoft-Windows-Security-Auditing event 4825

1 detection rule reference this event. View event page.

Sigma (1)

Denied Access To Remote Desktop severity medium T1021.001

Keyboard Shortcuts

j / k: Scroll down / up
d / u: Half-page down / up
h / l: Go back / forward
gg: Go to top
G: Go to bottom
f: Follow link (SHIFT = new tab)
/: Focus search
?: Toggle this help

See Navigation Reference for search modifiers and filters.