Detection rules › By eventMicrosoft-Windows-TerminalServices-ClientActiveXCore event 10241 detection rule reference this event. View event page.Splunk (1)Windows RDPClient Connection Sequence Events T1133