Claim
The attacker and legitimate users accessed the domain controller through Remote Desktop.
“admin credentials to this server, to RDP in”
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T07:09:10.128494+00:00
claim:ep096:55d761c4f009