NF – Croatian keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 1a 00 00" in the payload. The presence of this sequence could indicate the use of the Croatian keyboard layout during the RDP session setup.
NF – Chinese_Taiwan keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 04 00 00" in the payload. The presence of this sequence could indicate the use of the Chinese_Taiwan keyboard layout during the RDP session setup.
NF – Afrikaans keyboard layout in RDP connection setup
The rule detects RDP connection setup traffic containing the specific byte sequence "04 36 00 00" in the payload. The presence of this sequence could indicate the use of the Afrikaans keyboard layout during the RDP session setup.
POLICY-OTHER SunRPC Portmap GETPORT request detected
The rule is designed to trigger an alert when it detects a SunRPC Portmap GETPORT request in the network traffic. The specific content pattern in the rule corresponds to the GETPORT request for the SunRPC Portmap service.
POLICY-OTHER SunRPC Portmap GETPORT request detected
The rule is designed to trigger an alert when it detects a SunRPC Portmap GETPORT request in the network traffic. The specific content pattern in the rule corresponds to the GETPORT request for the SunRPC Portmap service.