Corelight Bright Ideas Blog

Microsoft

Analyzing encrypted RDP connections

By Anthony Kasza – May 12, 2020

Microsoft’s Remote Desktop Protocol (RDP) is used to remotely administer systems within Windows environments. RDP is everywhere Windows is and is useful for conducting remote work. Just like every other remote administration tool, RDP can be used... Read more »

Day 1 detection: CVE-2020-0601, a community, and 40 lines of code

By Richard Bejtlich – January 16, 2020

On Tuesday, Jan. 14, 2020, the world learned of the vulnerability du jour, CVE-2020-0601. As explained by Microsoft, “a spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC)... Read more »

Corelight Bright Ideas Blog

Microsoft

Analyzing encrypted RDP connections

Day 1 detection: CVE-2020-0601, a community, and 40 lines of code

Recent Posts

Sign up for our newsletter

Locations

1 (888) 547-9497

We're hiring!