iSID Analyst Knowledge Base

Definitions, and additional context on iSID alerts along with helpful recommendations

Category: Radiflow

( 189 Alerts)

NF – Latvian keyboard layout in RDP connection setup

The rule detects RDP connection setup traffic containing the specific byte sequence "04 26 00 00" in the payload. The presence of this sequence could indicate the use of the Latvian keyboard layout during the RDP session setup.

NF – Lithuanian keyboard layout in RDP connection setup

The rule detects RDP connection setup traffic containing the specific byte sequence "04 27 00 00" in the payload. The presence of this sequence could indicate the use of the Lithuanian keyboard layout during the RDP session setup.

NF – Indonesian keyboard layout in RDP connection setup

The rule detects RDP connection setup traffic containing the specific byte sequence "04 21 00 00" in the payload. The presence of this sequence could indicate the use of the Indonesian keyboard layout during the RDP session setup.

NF – Italian_Standard keyboard layout in RDP connection setup

The rule detects RDP connection setup traffic containing the specific byte sequence "04 10 00 00" in the payload. The presence of this sequence could indicate the use of the Italian keyboard layout during the RDP session setup.

NF – Japanese keyboard layout in RDP connection setup

The rule detects RDP connection setup traffic containing the specific byte sequence "04 11 00 00" in the payload. The presence of this sequence could indicate the use of the Japanese keyboard layout during the RDP session setup.

NF – German_Standard keyboard layout in RDP connection setup

The rule detects RDP connection setup traffic containing the specific byte sequence "04 07 00 00" in the payload. The presence of this sequence could indicate the use of the German keyboard layout during the RDP session setup.

NF – Greek keyboard layout in RDP connection setup

The rule detects RDP connection setup traffic containing the specific byte sequence "04 08 00 00" in the payload. The presence of this sequence could indicate the use of the Greek keyboard layout during the RDP session setup.

NF – Hungarian keyboard layout in RDP connection setup

The rule detects RDP connection setup traffic containing the specific byte sequence "04 0e 00 00" in the payload. The presence of this sequence could indicate the use of the Hungarian keyboard layout during the RDP session setup.

NF – Finnish keyboard layout in RDP connection setup

The rule detects RDP connection setup traffic containing the specific byte sequence "04 0b 00 00" in the payload. The presence of this sequence could indicate the use of the Finnish keyboard layout during the RDP session setup.

NF – French_Standard keyboard layout in RDP connection setup

The rule detects RDP connection setup traffic containing the specific byte sequence "04 0c 00 00" in the payload. The presence of this sequence could indicate the use of the French keyboard layout during the RDP session setup.