Carrie Roberts//* I have needed to remind myself how to set up RDP access through an SSH connection so many times that I’ve decided to document it here for future reference. I hope it proves useful to you as well. I do “adversary simulation” for work and so I present this information using terms like […]
Carrie Roberts//* (Updated 2/26/2019) Note: Windows Defender added a detection on 2/25/2019 which now detects this method as “AmsiTamper.A” Windows Defender does a good job of blocking many attacks, including attempts to establish Command & Control (C2) sessions with published tools like PowerShell Empire. I was recently looking for a way to establish such a […]
