NF – Russian keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 19 00 00" in the payload. The presence of this sequence could indicate the use of the Russian keyboard layout during the RDP session setup.
NF – Slovenian keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 24 00 00" in the payload. The presence of this sequence could indicate the use of the Slovenian keyboard layout during the RDP session setup.
NF – Romanian keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 18 00 00" in the payload. The presence of this sequence could indicate the use of the Romanian keyboard layout during the RDP session setup.
NF – Polish keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 15 00 00" in the payload. The presence of this sequence could indicate the use of the Polish keyboard layout during the RDP session setup.
NF – Mongolian keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 50 00 00" in the payload. The presence of this sequence could indicate the use of the Mongolian keyboard layout during the RDP session setup.