NF – French_Standard keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 0c 00 00" in the payload. The presence of this sequence could indicate the use of the French keyboard layout during the RDP session setup.
NF – Finnish keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 0b 00 00" in the payload. The presence of this sequence could indicate the use of the Finnish keyboard layout during the RDP session setup.
NF – English_United_States keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "09 04 00 00" in the payload. The presence of this sequence could indicate the use of the English_United_States keyboard layout during the RDP session setup.
NF – Danish keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "06 04 00 00" in the payload. The presence of this sequence could indicate the use of the Danish keyboard layout during the RDP session setup.
NF – Czech keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 05 00 00" in the payload. The presence of this sequence could indicate the use of the Czech keyboard layout during the RDP session setup.