Remote Desktop Network Traffic
Remote Desktop Protocol , Remote Services
Remote Desktop Protocol , Remote Services
Indicator Removal on Host , Clear Windows Event Logs
Local Account , Create Account
Path Interception by Unquoted Path , Hijack Execution Flow