home/categories/debugging/mukul975-anthropic-cybersecurity-skills-skills-detecting-rdp-brute-force-attacks-skill-md
debuggingtools

detecting-rdp-brute-force-attacks

Detect RDP brute force attacks by analyzing Windows Security Event Logs for failed authentication patterns (Event ID 4625), successful logons after failures (Event ID 4624), NLA failures, and source IP frequency analysis.

mukul975
maintainer
mukul975
Atualizado 4/6/2026
Estrelas
4240
Forks
464
quick start

Installation and usage

Detect RDP brute force attacks by analyzing Windows Security Event Logs for failed authentication patterns (Event ID 4625), successful logons after failures (Event ID 4624), NLA failures, and source IP frequency analysis.

Instalação
$ install --globalskills.sh
Uso

Depois de instalar, você pode usar esta skill executando o seguinte comando no terminal:

skills use detecting-rdp-brute-force-attacks