Defender Spotlight Ep. 2: Spotting Suspicious RDP with Corelight Anomaly Detection Corelight Oct 21, 2026 Corelight Share: Share on Facebook Share on Bluesky Share on LinkedIn Share through email When a host suddenly starts serving RDP traffic, it’s time to investigate. See how a Corelight customer used ML-powered anomaly detection to flag unexpected network behavior that could indicate unauthorized remote access or lateral movement.
