NF – Lithuanian keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 27 00 00" in the payload. The presence of this sequence could indicate the use of the Lithuanian keyboard layout during the RDP session setup.
NF – Latvian keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 26 00 00" in the payload. The presence of this sequence could indicate the use of the Latvian keyboard layout during the RDP session setup.
NF – Korean keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 12 00 00" in the payload. The presence of this sequence could indicate the use of the Korean keyboard layout during the RDP session setup.
NF – Japanese keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 11 00 00" in the payload. The presence of this sequence could indicate the use of the Japanese keyboard layout during the RDP session setup.
NF – Italian_Standard keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 10 00 00" in the payload. The presence of this sequence could indicate the use of the Italian keyboard layout during the RDP session setup.