liveBook · Manning

RDP brute-force attack

As explained in Azure Security

An RDP brute-force attack repeatedly tries credentials against Remote Desktop Protocol access to gain unauthorized entry.

An RDP brute-force attack repeatedly tries credentials against Remote Desktop Protocol access to gain unauthorized entry. It exploits weaknesses in security controls and represents a technique used by threat actors to pursue a goal. section 1.4

Understand the attack within the threat-landscape hierarchy:

  • A goal is the intended outcome, a tactic is the behavior used to pursue it, a technique gives the tactic more detail, and a procedure provides the highest level of detail. section 1.4
  • Threat actors may be external cyber criminals or malicious insiders, and commonly seek financial, political, or other malicious outcomes. section 1.4

How Azure Security covers it

How deep it goes
Defines the attack and places it in the goal–tactic–technique–procedure hierarchy without detailing its execution or defenses.
Examples
Uses repeated credential attempts against Remote Desktop Protocol access as the defining attack example.
What you can do after
Evaluate how a credential-guessing attack fits the threat taxonomy and exposes gaps in security controls.
How it connects
Connects Remote Desktop Protocol, credentials, vulnerabilities, security controls, threat actors, tactics, and procedures.
Cover of Azure Security
liveBookmanning.com
Read Azure Security on liveBook Get the book at manning.com

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.