Detection & Evasion

What is Remote Desktop Protocol (RDP)?

Remote Desktop Protocol is a Microsoft protocol for connecting to and controlling Windows systems remotely. Exposed or weakly secured RDP is one of the most common ransomware entry points, abused via brute forcing and stolen credentials.

Restricting, securing, and monitoring RDP is essential prevention. When attackers get in this way, Elastio detects the data impact and identifies clean recovery points.

Last updated May 27, 2026

Related terms

Deep File Inspection Hunt Engine Inference Threshold

Related Elastio resources

PlatformElastio Hunt Engine BlogThe Accuracy Gap: Why Anomaly and Entropy Detection Fail Case studyDefeating Stealth Ransomware with Deep File Inspection

See how Elastio proves clean recovery

Elastio hunts for ransomware inside your live, replicated, and backup data and pinpoints the last recovery point proven clean.

Explore the platform Request a demo

Related questions

What is fileless malware?What is threat hunting?How does Elastio detect ransomware that endpoint and perimeter security miss?Can Elastio detect zero-day or unknown ransomware?How does Elastio detect intermittent encryption?Can Elastio detect insider threats?

PreviousWhat is network segmentation?NextWhat is fileless malware?