Microsoft Entra Suite Tech Accelerator
Aug 14 2024, 07:00 AM - 09:30 AM (PDT)
Microsoft Tech Community

Sentinel RDP sessions

Copper Contributor



I was wondering if there was a query to identify devices (laptops/desktops) that are RDP from their device into servers. 


Thanks in advance!!

1 Reply

Hello @idontknowanything,


You need to stream logs from servers or from workstations to detect RDP sessions.