When looking at event logs, what should we watch out for to spot Remote Desktop Protocol logins?
ⵜⴰⵍⴻⵎⵎⴰⵙⵜ
ⵛⵉⴱⵔ ⵛⵉⵅⵜ
