HectorDiaz25

Hello I recently installed Malwarebytes on a domain controller in my home test environment. Since the day of the install I have been getting the same RDP intrusions has mentioned by Chris. However, I cannot identify legitimate RDP sessions in logs, services calling out to port 3389, or individuals logged in during the times of the RDP intrusion detection times. Any thoughts on what could be going on or is this just false positives being thrown out due to a corrupt install? @ChrisLombaard Was there a resolve to this issue? Thanks, Hector

Hello I recently installed Malwarebytes on a domain controller in my home test environment. Since the day of the install I have been getting the same RDP intrusions has mentioned by Chris. However, I cannot identify legitimate RDP sessions in logs, services calling out to port 3389, or individuals logged in during the times of the RDP intrusion detection times. Any thoughts on what could be going on or is this just false positives being thrown out due to a corrupt install? Thanks, Hector