RDP Authentication vs. Authorization

In this episode, we'll learn about an important RDP scenario involving Network Level Authentication (NLA) and the Windows Event Log entry that is generated as a result. We'll also see what happens when authentication succeeds, but authorization fails, and how that impacts what's logged.

*** If you enjoy this video, please consider supporting 13Cubed on Patreon at patreon.com/13cubed. ***

📖 Chapters

00:00 - Intro
01:10 - Demo

🛠 Resources

RDP Flowchart:
https://drive.google.com/file/d/1aNrqL174RulfBa4I0_KlOqOiYChdqrKM/view?usp=share_link

#Forensics #DigitalForensics #DFIR #ComputerForensics #WindowsForensics

authentication authorization entry event generated important learn log network patreon rdp result scenario video windows