25
/
en
AIzaSyAYiBZKx7MnpbEhh9jyipgxe19OcubqV5w
January 31, 2021
3538483
322198
2

17h 17min, sep 1, 2016 y - 新增防火牆例外名單(RDP)

Description:

\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx

A rule has been modified in the Windows Defender Firewall exception list.

Modified Rule:
Rule ID: RemoteDesktop-Shadow-In-TCP
Rule Name: 遠端桌面 - 陰影 (TCP-In)
Origin: 1
Active: 0
Direction: 1
Profiles: 4
Action: 3
Application Path: C:\Windows\system32\RdpSa.exe
Service Name:
Protocol: 6
Security Options: 0
Edge Traversal: 1
Modifying User: S-1-5-21-4013561640-1153130163-268913098-500
Modifying Application: C:\Windows\System32\SystemPropertiesRemote.exe

Added to timeline:

21 Nov 2019
0
0
107
1081121-離職員工破壞伺服器案

Date:

17h 17min, sep 1, 2016 y
Now
~ 4 years and 5 months ago
PayPal - The safer, easier way to pay online!logo
About & FeedbackTermsPrivacy