The rule detects RDP connection setup traffic containing the specific byte sequence "04 26 00 00" in the payload. The presence of this sequence could indicate the use of the Latvian keyboard layout during the RDP session setup.
The rule detects RDP connection setup traffic containing the specific byte sequence "04 27 00 00" in the payload. The presence of this sequence could indicate the use of the Lithuanian keyboard layout during the RDP session setup.
The rule detects RDP connection setup traffic containing the specific byte sequence "04 21 00 00" in the payload. The presence of this sequence could indicate the use of the Indonesian keyboard layout during the RDP session setup.
The rule detects RDP connection setup traffic containing the specific byte sequence "04 10 00 00" in the payload. The presence of this sequence could indicate the use of the Italian keyboard layout during the RDP session setup.
The rule detects RDP connection setup traffic containing the specific byte sequence "04 11 00 00" in the payload. The presence of this sequence could indicate the use of the Japanese keyboard layout during the RDP session setup.
The rule detects RDP connection setup traffic containing the specific byte sequence "04 07 00 00" in the payload. The presence of this sequence could indicate the use of the German keyboard layout during the RDP session setup.
The rule detects RDP connection setup traffic containing the specific byte sequence "04 08 00 00" in the payload. The presence of this sequence could indicate the use of the Greek keyboard layout during the RDP session setup.
The rule detects RDP connection setup traffic containing the specific byte sequence "04 0e 00 00" in the payload. The presence of this sequence could indicate the use of the Hungarian keyboard layout during the RDP session setup.
The rule detects RDP connection setup traffic containing the specific byte sequence "04 0b 00 00" in the payload. The presence of this sequence could indicate the use of the Finnish keyboard layout during the RDP session setup.
The rule detects RDP connection setup traffic containing the specific byte sequence "04 0c 00 00" in the payload. The presence of this sequence could indicate the use of the French keyboard layout during the RDP session setup.