RDPGraph: Turn Windows Event Logs into an Interactive RDP Attack Graph
RedSide Security June 03, 2026 Tools & Technology 86 views
When an incident unfolds and all you have left are Windows event logs, understanding attacker movement becomes a slow and painful process. RDPGraph transforms raw `.evtx` files into an interactive BloodHound-style graph, allowing responders to quickly visualize RDP activity, identify lateral movement, and investigate compromised systems in minutes instead of hours.
cybersecurity
infosec
reconnaissance
threat-actors
osint
monitoring
attack-prevention
incident-response
endpoint-security-threat-intelligence
opensource
threat-detection
windows
security-operations
active-directory
soc
siem
log-analysis
redside-1
product-update
use-cases
Continue reading: RDPGraph: Turn Windows Event Logs into an Interac…