Appearance
RDP (MSTSC)
Validate classic Microsoft Remote Desktop (MSTSC) interactions with clipboard, drive/printer redirection, audio devices, and screen capture behavior under the Secure Sandbox.
Objectives
- Enforce clipboard and device redirection policies for remote sessions.
- Verify that drive and printer mappings do not enable unauthorized egress.
- Confirm screen capture deterrence for the RDP window per policy.
Preconditions
- Windows target with Turbo Launcher and Secure Sandbox.
- MSTSC installed (classic).
- DataMotion posture configured for clipboard and screen capture; device controls configured for printers/audio.
Controls Under Test
runtime.dataMotion.rules[]withchannel: "clipboard"|"screenCapture".- Device policies for printers and audio devices.
- Storage Contexts when using mapped drives.
Test Scenarios
| ID | Canonical ID | Scenario | Procedure | Expected Outcome |
|---|---|---|---|---|
| SCEN-REMOTE-RDP-01 | DM-CLIP-01 | Clipboard outbound | Copy text/file from remote session; paste on host. | Denied/processed per policy; audit dataMotion event with channel: "clipboard", direction: "out". |
| SCEN-REMOTE-RDP-02 | DM-CLIP-06 | Clipboard inbound | Copy on host; paste into remote session. | Denied/processed per policy when inbound deny is set; audit shows direction: "in". |
| SCEN-REMOTE-RDP-03 | HARD-FILES-01 | Drive redirection | Enable drive mapping; attempt copy to host drive. | Denied per file policies or restricted to Storage Contexts; audit fileOp shows deny/virtualize. |
| SCEN-REMOTE-RDP-04 | DM-DEVICE-01 | Printer redirection | Attempt to print from remote app to host printers. | Denied or watermarked per policy. |
| SCEN-REMOTE-RDP-05 | DM-DEVICE-01 | Audio devices | Test microphone/output redirection. | Denied unless explicitly allowed. |
| SCEN-REMOTE-RDP-06 | DM-SCREEN-04 | Window capture | Snipping Tool on RDP window. | Block/obfuscate or watermark per policy; audit dataMotion with channel: "screenCapture". |
Evidence Requirements
dataMotionevents for clipboard/screenCapture.deviceevents for printer/audio;fileOpwhere drive mappings interact with Storage Contexts.
Troubleshooting
- Ensure MSTSC redirection settings match intended tests (on/off per channel).
- Validate that device policies apply within the sandbox session for redirected devices.
Known Limitations & Negative Space
- Remote host policies may affect observed behavior; focus on sandbox-side enforcement.