1024 RDP ClientActiveX is trying to connect

Log Location:

  • Microsoft-Windows-TerminalServices-RDPClient/Operational

Considerations:

  • This event is logged by default

  • Can be used to hunt for connections to other machines over RDP

Last updated